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System and method for ensuring secure transfer of a document from a client of a 
network to a printer. 



The invention relates to a printing control system and a printing control method for 
5 ensuring secure transfer of documents from a client connected to a network such as a 
local area network (LAN) or a wide area network (WAN) to a user who is allowed 
access to the documents from a printing communication unit connected to a printer. The 
printing control system and printing control method provides means for a client station to 
designate a document to a single user or a group of users and provides the possibility 
1 0 for the single user or the group of users to access the document at a plurality of printer 
communication units. 

rS The state of the art provides several techniques for enabling a client the opportunity to 
share documents and directories with other clients connected to a network. Thus the 

45 state of the art provides other clients connected to a network to access a document and 

^ perform printing of the document either locally or at any printer accessible through the 
network. However, the state of the art fails to perform a secure transfer of the 

N documents provided by the sharing client since the documents may be printed at any 

printer connected to the network and at any time according to the selected printer's job 
j2o queue. Hence the user of the network may transmit a shared document as a print job to 
the printer's job queue without knowing when the printer actually prints the shared 
document and consequently the shared document may lay open to inspection by 
anybody at the printer. 

25 In sharing a document or directory in the state of the art network system, the client 

sharing a document or directory may determine which clients of the network are allowed 
access to the shared document or shared directory. The state of the art network system, 
however, does not inform the sharing client which client or clients in the network have 
actually accessed the shared document or directory. Neither does the state of the art 

30 network system provide billing of the accessing clients when the shared document is 
opened or printed. Generally the state of the art network system provides the 
opportunity to share documents with designated users or clients of the network system 
without providing client's access times, clients accessing the shared document and 
accounting information to the sharing client. 
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A method and apparatus for managing remotely located document producing machines 
by using cellular radios is described in US patent no. US 5,787,149 hereby incorporated 
by reference in the patent specification. The US patent discloses an apparatus for 
5 managing a series of document producing machines such as printers, copiers or faxing 
machines by recording and transmitting use of the machines to a managing unit so as to 
provide a vendor leasing the machines to lessees with a picture of how much the 
machines are used. The vendor may then utilise the information transmitted from the 
machines to bill the lessees according to the lessees' use. The apparatus described in 
10 US 5,787,149 provides billing of a lessee in accordance with use of a leased document 
producing machine, however, the apparatus does not provide means for billing separate 
users having access to the leased document producing machine for producing prints of 
" documents on the leased document producing machine. 

J15 An object of the present invention is to provide a system and method enabling safe 

printing of a print job by securing a transmission of the print job through a network to a 
printer and only releasing the print job to a user designated by a client of the system 

- and method to access the print job. 

- 20 A further object of the invention is to provide a system and method for distributing a 

document to a plurality of users while maintaining a secure transfer of information from 
the transmitting client to the plurality of users. 

A particular advantage of the present invention is the provision in the system and the 
25 method of controlled discriminatory user access to a printer connected in a network by 
identifying users at the printer. 

A particular feature of the present invention is the provision in the system and the 
method of an account or credit for each user so that the each user is allowed printing 
30 operations at the printing in accordance with user credit. 

The above object, advantage and feature together with numerous other objects, 
advantages and features which will become evident from the below detailed description 
of a preferred embodiment of the present invention is according to a first aspect of the 
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present invention obtained by printing control system for ensuring one or more users of 
a network (such as a LAN: local area network, or a WAN: wide area network) secure 
access to a print job designated to said one or more users of said network, and said 
printing control system comprising: 
5 (a) a client station of a first plurality of client stations for designating said print job to 
said one or more users, said print job defining a document containing user 
readable information and defining a header containing document access 
information, 

(b) a spool connected to said client station for spooling of said document and 
10 substituting said document in said print job with a spooled document, 

(c) a job database connected to said spool for receiving said spooled document and 
said header from said client station, said job database defining a document table 
and a user table and storing said spooled document in said document table and 
storing said header in said user table, 

15 (d) a printer communication unit of a second plurality of printer communication units 
for receiving user identifying data input by said one or more users to said printer 
communication unit, 

(e) a server managed by a network administrator and interconnecting said printer 
communication unit to said job database for establishing said one or more users 

20 in said user table enabling said one or more users access to said network, for 

validating said one or more users on the basis of said user identifying data input 
to said printer communication unit against user information stored in said user 
table, and for ensuring said user identifying data and said user information 
provide said one or more users access to said spooled document, 

25 (f) a printer connected to said printer communication unit for receiving said spooled 
document from said job database and having a request input for receiving a print 
request from said one or more users and communicating said print request to 
said server, and 

(g) a print engine interconnecting said job database and said printer communication 
30 unit for compiling of said spooled document to be communicated to said printer 

through said printer communication unit, said print engine receiving said spooled 
document from said document table in said job database. 

According to the basic realisation of the first aspect of the present invention the printing 
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control system enables a plurality of client stations to designate a data file or docunnent 
to a plurality of users accessing the printing control system by identifying themselves at 
any printer connected to the network. Thus providing a secure transfer of the data file or 
document designated to one user or a plurality of users from any of the client stations 
5 connected to the network by determining the identity of each user requesting a print of 
the data file or document. The transfer is further secured by encrypting the document 
before transferring the document through the network by utilising either a public 
encryption key or private encryption key. 

10 The term one or more users as applied In this context should be construed as an 

individual user, a population of users, a plurality of users, a multiplicity of users or group 
of users, or an individual user in the said population of users. 

The one or more users of the printing control system do not necessarily have to be 
15 provided with or have access to an individual client station, since the one or more users 
may simply have access to the print jobs display at the printer communication unit but 
access to designate print jobs. The printing control system may therefor ideally be 
utilised for distributing information such as working schedules, tasks or any other type of 
information to employees having no access to an individual client station in the network 
20 but entirely access to the printer communication unit. This may be employees such as 
machining tool operators, medical personal, sales assistance or chauffeurs not needing 
a personal computer or the like for performing their daily work. These employees may 
collect their daily tasks from a printer communication unit positioned at any location 
accessible to the employees. 

25 

The secure transfer of the document and further communication between elements of 
the printing control system is provided on the network is established by bus 
connections, by cable connections such as current carrying cables and/or optical 
cables, by wireless links such as mobile radio transmission links, infra-red transmission 
30 links or ultra-sonic transmission links, or by any combination thereof. By utilising bus 
connections between some or all elements of the printing control system a particular 
fast communication is achieved. However, generally communication between elements 
of the printing control system is performed on a wide variety of connections thus 
providing a very dynamic communication system. 
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utilising mobile radio transmission links as for providing at least part of the network 
communication ensures a printing control system of great versatility, since the printing 
control system as such become mobile and client station may access the network from 
5 any position within range of a mobile radio transmitter station. 

The communications between elements of the first aspect of the present invention 
comprises control signalling and document transfer. The document is constituted by a 
file configured in any binary format such as text format, comma or space separated 

10 variable format, or any user or software-defined format. By employing a printing control 
system accepting any binary file format provides a great advantage since it enables 
communication between two otherwise non-compatible systems is achieved. The 
header contains information such as information regarding data stream format such as 
PostScript, PDF, IPDS, PCL, PCLXL or AFP format, print formats such as simplex, 

15 duplex, colour, page size, page rotation, tray, stapling, number of pages of the spooled 
document, access for said one or more users to said spooled document, a digital client 
signature, duration in which the one or more users are allowed access to the spooled 
document, and number of pages defined by the spooled document or any combination 
thereof. The header ensures that the user table is updated with relevant information 

20 regarding which users are allowed access to the spooled document. 

Further in accordance with the first aspect of the present invention each of the first 
plurality of client stations comprise a local memory, a display, a keyboard and preferably 
a local central processing unit such as constituted by personal computers, computer 
25 workstations and/or such as constituted by mobile communication clients like mobile 

phones or mobile communicators or any combinations thereof. Generally the first aspect 
of the present invention may be established incorporating a wide variety of client station 
types thus ensuring communication and transfer between various client types. 

30 The spool provided for in the first aspect of the present invention performs spooling of 
the document according to a data stream format such as to PostScript, PDF, IPDS, 
PCL, PCLXL or AFP format. The printing control system allows for any data stream 
format to be utilised, hence ensuring further that generally a wide variety of printer types 
may be connected to the printing control system. 
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The printing control system establishes a secure network by utilising secure networking 
procedures providing symmetrical and/or asymmetrical encryption in accordance with 
public and/or private encryption keys. The encryption provided by the spool enhances 
5 security of the transmission between client stations connected in the network. 

Additionally, the spool incorporates a port monitor for parsing the spooled document in 
order to determine data stream format such as PostScript, PDF, IPDS, PCL, PCLXL or 
AFP format, and further to determine print formats such as simplex, duplex, colour, 
10 page size, page rotation, tray, stapling, and number of pages the spooled document will 
constitute during printing of said spooled document. The page count is utilised for 
determining the price for performing a print of the spooled document at any printer 
connected to the network. 

1 5 Further, in accordance with the first aspect of the present invention the job database is 
established on a memory storage unit accessible by the server such as magnetic 
storable hard disk, magnetic storable tape and/or magneto-optic storage disks on the 
server having the user table and the document table allocated in storage spaces on the 
memory storage unit. Further, the user table allocates a record space in the memory 

20 storage unit for the header, and the document table allocates a storage space in the 
memory storage unit for the spooled document. Alternatively, the user table allocates a 
record space in the memory storage unit for the header, and the document table 
allocates a storage space in the memory storage unit for a pointer to the spooled 
document on the local memory of the client station or in the document table. It is further 

25 possible to implement the server incorporating the spool, the job database and the print 
engine in a server memory. Thus providing a system which may utilised a bus hence 
significantly increasing processing and transmission times between elements of the 
present invention. 

30 Any of alternative the above mentioned types of storage media may serve as a memory 
storage unit, hence the first aspect of the present invention ensures compatibility 
between new and older communication systems and additionally, provides a choice of 
storage media in accordance with the necessary capacity of the printing control system. 
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The printer communication unit according to the first aspect of the present invention 
comprises a front-end module for identifying the one or more users of the network and a 
control unit for providing an interface for the print engine and the server to the printer. In 
order to accomplish communication between the user and the printer communication 
5 unit the front-end module comprises a display for showing the user accessible print jobs 
and operations menus, and comprises a keypad for providing an interface between the 
user and the front-end. 

The display according to the first aspect of the present invention utilises cathode-ray 
10 tube screen techniques or the display utilises liquid crystal display techniques. Either 
type of display provide high resolution clear visual graphic interfaces for the user. The 
keypad is constituted by a general personal computer keyboard, a numerical keypad or 
a functional keypad or constituted by a touch sensitive film mounted on the display so 
as to allow the user to perform user operations by pressing the touch sensitive film in 
15 accordance with information showed on the display. Utilising a touch screen further 
enhances the graphics interface between the user and the printer communication unit. 

The front-end module according to the first aspect of the present invention comprises a 
iris scanner, a fingerprint reader for identifying the one or more users at the front-end 

20 module and/or preferably a card reader for reading card information from a card such as 
a credit card, a library card, a health insurance card, a driving licence card, a passport 
card, a membership card, a company identity card or an institutional identity card. The 
card information includes information such as card user name, card user ID, card user 
credit, card user's access rights, card user's server address, card user identifying 

25 number, card issuing date, card identity number, digital signature of one or more of said 
client station of said first plurality of client stations or any combination thereof. The card 
reader receives card information from the card and communicates the card information 
to the server. The front-end module requests a first user pin code. 

30 Further, in accordance with the first aspect of the present invention the card utilises 
electronic storage techniques, electro-magnetic storage techniques, magnetic storage 
techniques, magneto-optic storage techniques, optic storage techniques or any 
combinations thereof for storing of the card information. 
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The user identifying data includes the card infornaation and the first user pin code and 
the user information stored in the user table includes system user name, system user 
ID, system user credit, system user's access rights, system user's server address, 
system user identifying number, system user PUK code (personal user key), system 
5 user initiation date or any combination thereof, and a second user pin code. The control 
unit transmits upon receipt of the first pin code the user identifying data to the server for 
verification. This transmission is accomplished by the control unit communicating with 
the front-end module and the printer through a parallel connection, a serial connection, 
a local area network (LAN) connection, a wireless connection such as a mobile radio 
1 0 transmission connection, an infra-red transmission connection or an ultra-sonic 
transmission connection, or any combination thereof. 

The user identifying data includes the card information and a first user pin code and the 
user information stored in the user table includes system user name, system user ID, 
system user credit, system user's access rights, system user's server address, system 
user identifying number, system user PUK code, system user initiation date or any 
combination thereof, and a second user pin code. The server establishes and validates 
^ the one or more users by identifying the user information in the user table on the basis 
■r of the user identifying data and by matching the first pin code with the second pin code. 
t:20 Alternatively, during first use of the card by matching the system user PUK code with an 
=^ entered user PUK code and the server locating in the document table all print jobs 
designated for the one or more users and communicating titles of ail print jobs 
designated for the one or more users to said front-end display enabling the one or more 
users to select a print job or a multiplicity of print jobs. 

25 

Hence the server performs the verification of user identifying data by comparing the first 
pin code transmitted from the control unit with the second pin code attached to the user 
information stored in said user table. Furthermore, the server locates in the user table 
ail print jobs designated for the user and communicates titles of all print jobs designated 
30 for the user to the front-end display enabling the user to select a print job. When the 
server has verified the user then the user may select any of the listed available print 
jobs and perform various operations on the available print jobs. 

As the server receives a print job selection from the one or more users at the front-end 
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module and the server provides the one or more users access to the spooled document 
in the document table in the job database upon validation of the user identifying data. 



Subsequently the server provides an opportunity for the one or more users to delete the 
5 spooled document from the one or more users' print job list, determine desired number 
of copies required of the spooled document, retain printing of the spooled document in a 
draft version for a first price, view the spooled document on the display for a second 
price, print the spooled document on the printer for a third price and terminate further 
operations on the front-end module. The price of these optional operations allowed the 
10 user at the printer communication unit might be determined in accordance with various 
criteria. For example the price for printing of the spooled document may be different for 
each user depending on number of copies taken of the spooled document or depending 
on who the author of the particular spooled document is. Further the price might be 
based on the relative to for example artists royalty fees such as for example Koda- 
15 Gramexfees. 

The server deducts the credit of the one or more users of a first amount equal to the first 
price if the one or more users prints a draft version of the spooled document, a second 
amount equal to the second price if the one or more users views the spooled document 

20 and a third amount equal to the third price if the one or more users prints the spooled 
document or the server establishes a client credit record for each of the client stations 
designating the one or more users and deducts the client credit record of a first amount 
equal to the first price if the one or more users prints a draft version of the spooled 
document, a second amount equal to the second price if the one or more users views 

25 the spooled document and a third amount equal to the third price if the one or more 
users prints the spooled document. Thus the client station designating a particular print 
job to a group of the one or more users of the network will be charged in accordance 
with the document type and in accordance with how many of the designated user prints 
the print job. For example a bookstore may have access to a printing control system 

30 through a printer communication unit and each time the bookstore wishes to sell a copy 
of a document designated to that book store the book store may perform a print job. 
Subsequently the bookstore will be charged either daily, weekly, monthly or yearly for 
the number of copies the bookstore has performed of the print job. The bookstore or 
generally users are provided with a wide range of options of operations allowing the 
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users to select at wide variety of operations, which accordingly will be debited the users 
upon termination of operations. The printer communication unit may obviously be 
constituted by a personal computer, a work station, a mobile communicator or a mobile 
phone. 

5 

The above object, advantage and feature together with numerous other objects, 
advantages and features which will become evident from the below detailed description 
of a preferred embodiment of the present invention is according to a second aspect of 
the present invention obtained by a printing control method for ensuring one or more 
10 users of a network (such as a LAN: local area network, or a WAN: wide area network) 
secure access to a print job designated to said one or more users of said network, and 
said printing control system comprising: 

(a) designating said print job defining a document containing user readable 
information and defining a header containing document access information to 

1 5 said one or more users by means of a client station of a first plurality of client 

stations, 

(b) spooling of said document and substituting said document in said print job with a 
spooled document by means of a spool connected to said first plurality of client 
stations, 

20 (c) receiving said spooled document and said header from said client station at a job 
database connected to said spool, defining a document table and a user table in 
said job database and storing said spooled document in said document table and 
storing said header in said user table, 

(d) receiving user identifying data input by said one or more users to a printer 
25 communication unit of a second plurality of printer communication units, 

(e) establishing said one or more users in said user table enabling said one or more 
users access to said network, validating said one or more users on the basis of 
said user identifying data input to said printer communication unit against user 
information stored in said user table, and ensuring said user identifying data and 

30 said user information provide said one or more users access to said spooled 

document by means of a server managed by a network administrator and 
interconnecting said printer communication unit to said job database, 

(f) receiving said spooled document from said job database and having a request 
input for receiving a print request from said one or more users at a printer 



RF-2000-01-28-G;\097\696\M_EB.(loc 



11 

connected to said printer communication unit and communicating said print 
request to said server, and 
(g) compiling of said spooled document to be communicated to said printer through 
said printer communication unit by means of a print engine interconnecting said 
5 job database and said printer communication unit, receiving said spooled 

document at said print engine from said document table in said job database. 

The printing control method according to the second aspect of the present invention 
incorporates above described features, described with reference to the printing control 
10 according to the first aspect of the present invention. 

Brief description of the drawings 

Figure 1 shows a schematic overview of a prior art communication network enabling 
15 remote printing. 

Figure 2 shows a schematic overview of a printing control system enabling exclusive 
printing from any printer connected to a network. 

20 Figure 3 shows a principal flow diagram of a method for providing exclusive printing 
from any printer connected to a network. 

Figure 4 shows a schematic diagram of all modules (excL a Broadcast server). 

25 Figure 5 shows a schematic diagram of signaling in situation where a user prints one 
document, using "print and pay". 

Figure 6 shows a schematic diagram of signaling of the printing control system. 

30 Figure 7 shows the dialog box asking client which account to bill a print job to, which 
dialog box is displayed to the client every time he prints. 

Detailed description of the present invention 
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In the following the printing system according to the preferred embodiment of the 
present invention will be described in detail with reference to the figures listed above. 

Figure 1 shows a schematic example of a prior art communication network designated 
5 by numeral 10 in its entirety. The communication network 10 provides communication 
between individual clients or personal units designated in their entirety by numerals 22, 
24 and 26. Each of the individual clients or personal units 22, 24 and 26 comprise a 
local memory for storing of data files. The communication between the clients 22, 24 
and 26 is executed and controlled by a server 12 connected to each of the clients 22, 24 
10 and 26 through connections 16, 18 and 20. Additionally, the server 12 may further be 
connected to a printer 14 through connection 28. 

The server 12 may be configured so as to allow all clients access to the printer 14. 
Alternatively, the server 12 may be configured so as to allow a specific client of all 

15 clients 22, 24 and 26 connected in the communication network 10 access to the printer 
14 and additionally simultaneously deny all other clients access to the printer 14. 
Likewise any particular client, for example the client 22, may be configured to allow any 
specific or both the clients 24 and 26 access to a specific part of the client's 22 local 
memory so that both clients 24 and 26 or a specific client is allowed access to data files 

20 stored on that the client 22. 

Figure 2 shows schematic overview of a printing control system in accordance with a 
preferred embodiment of the present invention, which printing control system is 
designated in its entirety by numeral 100. The printing control system 100 enables any 
25 client 102' of a plurality of clients 120 connected in a local area network (LAN) or a wide 
area network (WAN) remote printing of data files. 

The client 102' utilises a spool 106 for compiling of a data file in accordance with a 
particular printing format. The spool 106 receives the data file through a connection 104 
30 between the client 102' and the spool 106, The client 102' or the plurality of clients 120 
in the preferred embodiment of the present invention may be constituted by a mobile 
phone 102" of a plurality of mobile phones or cellular phones to be configured as 
clients. The mobile phone 102" transmits the data file through a wireless connection 
designated by numeral 104' to a receiving spool 106'. The spooling operation may be 
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performed by any general printer driver facility provided in any operational system such 
as Linux, Unix System V, Windows or Windows NT or spool systems on AS/400 or 
S/300 midrange and mainframe respectively. The client 102' may further perform an 
encryption of the data file by means of a port monitor running on the client 102' so as to 
5 ensure that the data file is secure and safe against any violation or unintentional 
disclosure of the contents of the data file to intruders. 

The spool 106 establishes a print job by communicating the secured and spooled data 
file through a connection 108 to a job database 110 comprising a document table 112 

1 0 and a user table 114. The document table 1 1 2 lists a plurality of established print jobs 
each containing the transferred secured and spooled data file (a print job document) or 
alternatively containing information regarding position of the secured and spooled data 
file in the document table 1 12 or on the local memory of the client 102'. Each record (a 
print job header) in the user table 114 contains information regarding an encryption key 

15 either public or private key, users allowed by the client 102' to perform the print job or 
alternatively users disallowed by the client 102' to perform the print job, and status of 
the present print job (print job header). The client 102' may at any time retrieve 
information from the user table 1 14 for determining if the data file is printed and in case 
it has been printed which user has or which users have printed the data file. In the print 

20 by reference system the user indicates a memory location of the print job on the local 
memory of the client 102' in a LAN or a WAN and as soon as the printing control system 
100 identifies and verifies a user the secured and spooled data is decrypted and 
communicated to a printer 116. 

25 The printer 116 enables printing of the print job document listed in the document table 
112. The printer 1 16 is connected through a printer cable or a network connection 118 
to a control unit 120. The printer cable 118 may constitute a serial connection or 
preferably the printer cable 118 constitutes a parallel connection between the control 
unit 120 and the printer 116. The control unit 120 is further connected through a link 122 

30 to a front-end module 124, which comprises a display 126, a keyboard 128, a card 

reader 130 and/or a unit 130' for scanning irises or reading fingerprints. The display 126 
provides guidance to the users and may be implemented by a general cathode-ray tube 
screen or in the preferred embodiment of the present invention the display 126 is 
constituted by a liquid crystal display (LCD). The keyboard 128 in combination with the 
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card reader 130 enables any user of the printing control system 100 to identify 
themselves to the front-end module 124. The keyboard 128 may be any standard 
personal computer keyboard, a numerical keypad, a function keypad or any 
combinations thereof. In an alternative embodiment of the present invention a touch 
5 screen film mounted on the display 126 may constitute the keyboard 128. 

The link 122 between the front-end module 124 and the control unit 120 may be 
constituted by a parallel connection or in the preferred embodiment of the present 
invention the link 122 is constituted by a serial connection. In case the front-end module 
10 124 and the control unit 120 are incorporated into the printer 1 16 an internal bus may 
constitute the link 122. 

Every user of the printing control system 100 has a card 132 for identifying the particular 
user at the front-end module 124. The card 132 may include information stored there 

% upon by applying magnetically storage, electrically storage or any combinations thereof. 

;j In an alternative embodiment of the present invention the card 132 may include 
information stored there upon by applying optically storage or magneto-optically 
Storage. The information stored on the card 132 may be name of user, password for 
user, user certificate, total number of print jobs allowed, executed number of print jobs, 

go total number of allowed pages to be printed and total number of printed pages. Further 
the card 132 may contain information regarding specific access to particular issuers or 
clients writing to the LAN or WAN. Alternatively, the card 132 may be constituted by a 
credit card holding information regarding identity of cardholder and financial credit. 
Means for identifying the user of the printing control system 100 may further be 

25 implemented through non-card authentication such as finger print or iris identification. 

By presenting the card 132 to the card reader 130 the front-end module 124 may 
determine the identity of the cardholder and request a pin code from the card holder in 
order to ensure a match between the cardholder and the certified user of that particular 
30 card 132. 

The control unit 120 is connected through a connector 134 to a server 136 carrying out 
requests issued by the control unit 120. The server 136 being connected through a 
connector 138 further provides an interface between the job database 110 and the 
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control unit 120. The interface ensures that the control unit 120 may communicate with 
any selected database. The server 136 may be connected to a plurality of control units 
similar to the control unit 120 either through a LAN or WAN thus enabling printing of a 
data file to be performed at any control unit connected through the LAN or WAN. Thus a 
5 secure and safe transmission of data files between two or more locations is achieved as 
soon as a user allowed to access the print job has been verified. 

When the client 102' communicates a print job to the job database 110 by transmitting a 
secured and spooled document to the document table 1 12 of the job database 110, 
10 then the client 102' additionally communicates a header associated to the secured and 
spooled document, which header contains information regarding which users have 
access to perform a print of the secured and spooled document and is transferred to the 
user table 1 14. 

1$ A user may log on to the printing control system 100 according to the preferred 

embodiment of the present invention at any front-end module by introducing the user's 
card 132 into the card reader 130 and entering the user's pin code. The front-end 
module 124 subsequently verifies the user's identity by checking the pin code. If the pin 
code is not In accordance with the pin code registered in the server 136 for that 

20 particular user, then the display 126 informs the user that access is denied. On the 

^ " other hand if the pin code is in accordance with the pin code registered in the server 
136 for that particular user, then the front-end module 124 requests print jobs from the 
control unit 120. However, only print jobs, which the particular verified user is allowed to 
perform. The control unit 120 in turn requests this information from the server 136 

25 checking the user table 1 14 in the job database 110. The verified user may then view a 
document list, select to printing of any of the print jobs or viewing any of the print jobs 
on the display 126, which print jobs are designated to the verified user. In case the 
verified user selects printing of a print job then the job database 1 1 0 communicates the 
print job through a connection 140 to a print engine 142. The print engine 142 enables 

30 the control unit 120 to upload the print job containing an secured and spooled data file 
through a connection 144 and subsequently enables the control unit 120 to further 
communicate the secured and spooled data file to the printer 1 16 so as to complete the 
print job. 
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A print log record is kept for each print job in the job database 110. The print log record 
lists users who have printed or viewed the print job, lists which front-end module 124 
and which printer 116 was utilised for each particular user viewing or printing the print 
job, and lists the time and date for each particular user viewing or printing the print job. 
5 A port monitor incorporated in the spool 106 parses the print job document in order to 
count the number of pages to be printed by the printer. A small postscript application is 
transmitted to the printer 116 before and after performing printing of the print job thus 
inquiring the printer 116 before performing the print job and subsequent to performing 
the print job of the hardware page count. The resultant page count of the print job is 

10 then introduced into the print log record. In conjunction with performing a hardware 

count of printed pages specific user defined billing categories may be introduced in the 
print log record so as to determine a price for performing the print job. The price may 

O vary as a function of number of pages printed in the print job or in fact the number of 
copies of the print job performed by the user and may further include a special price for 

15 viewing a print job. The print log record may be exported to the client 102' in any 
J required file format such as comma separated format, space separated format, in text 
format or simply in binary format. 

;y In the preferred embodiment of the present invention the user is, as described above, 
26 charged according to the number of pages the user prints, therefor the card issued to 
the user contains a maximum allowable number of printed pages. The number of 
printed pages for each card 132 is continuously monitored by the server 136 and the 
server 136 handles payments for the users printing or viewing of the print job. The price 
for performing a view or a print of a document may differ between users of the network 
25 in accordance to various agreements between the author of a document and the reader 
of that document e.g. in accordance with copyright agreements. Each specific user may 
at the front-end module 124 view his status account or credit and view printing costs for 
printing of the print job. If the specific user has no credit the server 136 will prevent the 
specific user from accessing the printing control system 100. 

30 

In addition to having general printers connected to the printing control system 100, the 
printing control system 100 further enables connecting copying machines to the LAN or 
WAN. The printing control system 100 tracks and logs copy clicks from copying 
machines when a user is identified at a copying machine. The documents in the job 
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database 112 may be accessed at the copying machines by importing the documents to 
the copy machine in a variable file format. 

The server 136 may be connected through a WAN to a plurality of servers and thus 
5 enable communication of print jobs and print log record information between the 

plurality of servers and the server 136. Thus the printing facilities provided by the server 
136 is extended to the plurality of servers thereby introducing a safe wide printing 
control system for distribution of print jobs and cost of performing print jobs. 

10 The client 102' may according to preferred embodiment of the present invention be 
constituted by personal computers, computer workstations or in an alternative 
embodiment of the present invention constituted by a combination of personal 
computers, computer workstations and mobile communication clients such as a mobile 
phone or a mobile communicator. The connections provided in the printing control 

15 system 100 is constituted by connections such as current carrying cables and/or optical 
cables or in an alternative embodiment of the present invention by mobile radio 
transmission links or by any combination of current carrying cables, optical cables and 
I mobile radio transmission links. 

20 Figure 3 shows a principle flow diagram designated in its entirety by numeral 200 and 
describing the operations of the printing control system according to the preferred 
embodiment of the present invention. The flow diagram 200 is shown as a sequentially 
evolving system for explanatory reasons only, the preferred embodiment of the present 
invention, however, provides a system performing parallel operations. Some operations 

25 are concurrently performed by the client 102', the server 136 and by a printer 

communication unit constituting the control unit 120, the front end 124 and the card 
reader 130. The term parallel operation is in this context to be construed as performing 
concurrent operations, a multiple of operations simultaneously or as performing real 
time operations. 

30 

In block 202, shown in the flow diagram 200 a plurality of clients create a number of 
print job records at any time. The print job record consists of a data file or document or 
alternatively a pointer pointing to an address of the data file or document to be 
transferred to any designated user of the printing control system. The print job record 
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further consists of a user file or header associated with the data file or document to be 
transferred through the printing control system, which user file or header includes 
information regarding users defined as designated users allowed access to the 
document, time during which the designated users are allowed access to the document 
5 and/or an address pointer to the document. 

When the printing control system according to the preferred embodiment of the present 
invention transfers data from one unit or element to the next in the printing control 
system the data is transferred utilising secure networking procedures providing either 
10 symmetrical encryption and/or asymmetrical encryption. Thus the printing control 
system provides a safe communication between the plurality of clients and the 
designated users of the printing control system. 

In block 204, the data file or document is spooled providing a document in a printer 
1 5 readable format. The spooling operation is performed at each client or in an alternative 
embodiment of the present invention at the server. Since in the preferred embodiment 
of the present invention the client performs the spooling operations a plurality of 
spooling operations may be performed simultaneously at each client. 

20 As the data file or document is spooled the print job is transferred to the job database in 
block 206. The document is written to a document table and the user file or header is 
written to a user table, which document table and user table is described with reference 
to figure 2. In the printing control system according to an alternative embodiment of the 
present invention the user file or a header contains a pointer addressing the document 

25 in a storage medium at the client. The client provides the document to designated users 
of the printing control system upon request from a designated user. In this alternative 
embodiment the print job is written to the user table since the user file or header 
contains all necessary information for the printing control system to extract the 
document from the client. 

30 

In block 208, the server is notified of the existence of a print job transferred from any of 
the plurality of clients in the printing control system. Subsequently the server enters a 
waiting mode with respect to the particular print job shown as question block 210. The 
server waits for any user to request the particular print job at any printer connected in 
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the printing control system. If a user performs a request for any print job at any of the 
printer communication unit connected in the printing control system, then the server 
initiates a verification of the requesting user shown as block 212 by correlating user log 
on information with user information stored in a server memory. 

5 

In block 214, the server determines whether the user should have access to the printing 
control system and provided the user log on information does not correspond with the 
user information stored in the server memory the user request is denied. Alternatively, 
the server transfers user options for the requesting user shown in block 216 to the 

10 printer communication unit. The user options provided to the requesting user vary for 
each requesting user in accordance with assigned options for each requesting user in 
the user table. The user options may be: List accessible print jobs, Select print job, View 
print job, Print print job, Show user account, Show number of pages of selected print 
job, Delete selected print job, Mark print job as not-deleteable, Display information 

15 about print job such information as duplex, simplex, colour, name, size, date, data- 
stream (PostScript, PDF, PCL, PCLXL, IPDS or AFP format), expiration data and End. 

In block 218, the server waits for the requesting user to select one of the options 
provided to him. During this waiting session shown as block 218 the server performs 
20 alternative operations while continuously monitoring the printer communication unit for a 
selection. When the requesting user has selected which operations to perform the 
server initiates the user-defined operations at the first available possibility, shown in 
block 220. The operations may be performed by the printer communication unit or by 
any printer connected to the printer communication unit. 

25 

The selection made by the requesting user and the time for the request is written to a 
print log file during block 222. This operation may be performed subsequent to the 
requested tasks or concurrently to the requested tasks. Additionally, the sen/er updates 
a user account in accordance with the selected operations and with a predefined price 
30 for the requesting user for the particular selected operations during block 224. 

The server monitors the operations performed on each print job and sets a flag or 
provides a signal when the print job according to the user file or header associated with 
each print job is or rather should be concluded. In case the time in which the print job 
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should remain accessible to the designated users of the printing control system 
according to the preferred embodiment of the present invention has expired the server 
sets the flag. In block 226, the printing control system performs a check for whether the 
flag is set by the server. 

5 

If the flag is set then the operations performed on the associated print job are 
terminated. If on the other hand the flag is not set then the printing control system 
continues to examine whether all designated users have accessed the print job, shown 
in block 228. In case not all designated users have accessed the print job the printing 
10 control system returns back to the questioning block 210. Alternatively the printing 
control system deletes the print job from the job database in block 230, notifies the 
sen/er of the deletion of the print job in block 232 and terminates further operations on 
the print job in block 234. 

15 Example 

The preferred embodiment will below be described with reference to an example 
implemented in accordance with the presently preferred specification. 

20 SOFTWARE DESIGN SPECIFICATION 

General 



This design specification describes the modules and interfaces used by the software 
components of the "SafeCom Accounting" system. The project is based on software, 
25 described as "SafeCom" software. Except if explicitly noted herein, all functionality and 
behavior implemented in "SafeCom" applies to "SafeCom Accounting", 

Abbreviations 

GUI Graphics User Interfaces 

TCP/IP Transmission Control Protocol/Internet Protocol 

30 LPR/LPD Line Printing/Line Printing Daemon 

SQL Structured Query Language 

UDP User Datagram Protocol 

SS SafeCom Server 
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PE Print Engine 

JDB Job Database 

CU Control Unit 

FE Front End 

5 AdmGUI SafeCom Administration Tool 

Brief Product Description 

The SafeCom product in itself concerns the implementation of a technique that ensures 
10 that a printed document is held until the designated receiver chooses to print it on the 
printer where she stands. 

This project will improve the SafeCom product, with accounting capabilities based on 
the page-count of the physical printer. Moreover this project will implement two new 
15 mechanisms respectfully called "Billing" and "Distribution". As a new facility, the install 
program will give the user opportunity to install a secure client for Wjn95 and Win98. 

Configuration will still be maintained through the Win32 based administration GUI. It will 
be enhanced with capabilities of exporting data from the new accounting database, and 
20 performing simple data mining in the collected data. It should also be possible to import 
the user database from WinNT for easy administration of the SafeCom system, this last 
facility will be implemented if time permits it. 

The AdmGui of "SafeCom Accounting" will be Win2000 compliant, all other components 
25 cannot be guaranteed to be Win2000 compliant 

Highlights: 

• Accounting using page-count of the physical printer 

• Export of data from SafeCom accounting database 

30 • Requires a professional accounting program, capable of viewing the exported data 

• Supports Print-and-Pay by exporting data from the "SafeCom Accounting" database. 
The solution requires a professional accounting program, capable of viewing the 
exported data and charging accordingly. 
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• Supports Pay-and-PrintvlB external dll loaded by "SafeCom Accounting". This 
solution also requires a professional accounting program, which innplements the dll. 
The dll is used to retrieve credit information continuously from the accounting 
program. The accounting program must be capable of monitoring the credit rating of 

5 the customers as well as charging them accordingly. 

• Secure client for Win95 and Win98 

• National language support for text shown on the LCD display of the FE 

• Easy administration workload by importing users from Windows user database. 

• Windows 2000 compatibility. 

10 • Simple data mining in Admin GUI. 

• Pay and Print Demo GUI. 

Software Description 

15 In order to implement the accounting system, a new accounting server has been 
developed in the SafeCom system. This is to manage a database which hold all the 
information needed for accounting. Thus the CU should be capable of reporting the 
number of pages printed on the physical printer to the accounting server via the 
SafeCom Server. Reference printers used during development will be HP 8100 and HP 

20 4500 Color. 

The two ways of which the accounting mechanism works is "Print and Pay" and "Pay 
and Print"; 

25 Print and Pay 

In this way, all information for accounting is maintained by the accounting server and 
stored in an accounting database. This is for the administrator to extract information and 
export it to a file, which will be the interface to an extern accounting application (not 
included in the SafeCom system). The exported data will be a comma separated file. 

30 

The following information is stored in the SafeCom accounting database: 
key: ID 

wlien: Start time, End time 
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who: User name, User login, Email 

where: Printer name, Printer Mac, Printer IP, Printer location 

what: Job name, Job attr (duplex, color, pages, format, copies), NumberOfCopies 

status: Open I Closed I Fixed, Total pages. 

5 

From the AdmGUl it will be possible to delete old entries which is not needed anymore. 
Pay and Print 

The "Pay and Print" functionality is dependant on an external application, capable of 
1 0 keeping track of resource cost of each printer, as well as providing the current credit 
level of all users. This application is not a part of the SafeCom system, but should 
include a special component (dll) with the following entry point functions: 

• StartAccounting(Userlnfo, Documentlnfo, Printerlnfo, Copies) ^ SessionID, 
15 OKlAbort, CreditsLeft 

• NotifyPagesPrinted(SessionlD, PageCount) ^ OK|Abort, CreditsLeft 

• StopAccountng(SessionlD) 

SafeCom will call the above functions to obtain credit information. If ever a function 
20 return the "Abori:" signal, the client will stop printing immediately. 

However, SafeCom will still maintain it's own accounting database with information as in 
"Print and Pay". 

25 Demo application for Pay and Print 

Although the external application for Pay and Print is not included in this project, a very 
small program is made for demonstration only. 

National Language Support 
30 As mentioned in the requirement specification the national language support is for text 
shown on the LCD display only. 

The supported languages will be English, Danish, German, French, Spanish and Italian. 
This means that the LCD display must be capable showing special national characters. 
A special code page is made for this purpose. 
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UNICODE is implemented in the server software, and a conversion therefore takes 
places before showing document titles on the LCD display. The conversion will take 
place in the Server Code. 

5 

Windows 2000 compatibility 

The installation program has to be changed for the SafeCom system to run on the 
windows 2000 platform. If other components needs to be coded specialy for win2000 
will be tried out during development. 

10 

Module Description 
Overview 

In the following we will show a schematic draw (shown in figure 4) of all modules (excl. 
15 the Broadcast server) belonging to the SafeCom architecture including the Accounting 
server. Additionally the figure 4 will identify the different interfaces, binding the modules 
together. 

All interfaces are shown as two sided arrows, one filled and one unfilled. The filled 
20 arrow indicates which end acts as the server end, thus indicating the direction of all 
requests belonging to the protocol. Interfaces marked with "*" include encryption 
facilities applied to the transport layer. 

Changes for Accounting Project 
25 This chapter describes the new accounting sender modul and the changes in the 
existing SafeCom modules, if any. 

SafeConn Control Unit 

It is the Control Unit which start and stop the accounting process and report pages 
30 printed while the process is running. 

The Control Unit should therefore be capable of detecting page boundaries while 
printing. 
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Also the Control Unit's code page is enhanced for national language support. 
Front End 

TBD (Accounting messages) 

5 SafeCom Server 

The SafeCom Server is modified to hold connection with the new Accounting Server. 
This is to manage the accounting data from the Control Unit. It is designed to handle 
continuous information from the Control Unit while printing. 

10 Job Database 

The Job Database is enlarged with a printer table holding information about printers and 
there status. This will give the opportunity to implement "full job control" in the future. 

Moreover, this version of the Job Database will create and maintain an activity log file, 
1 5 holding information about user creation, login fail, ect. 

Print Engine 
No changes. 

AdmGUl (Scunn) 
20 These new features are discovered: 

• Make the Accounting Server export the accounting information. 

• Delete old entries from the accounting database. 

• Import of the Windows user database. 
25 • Simple data mining: 

1 . Create an overview of how many pages each user has printed during a given 
time period. 

2. Create an overview of the total numbers of pages printed on the various printers. 
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Note: The AdmGUl is acting through the Scum module, however the data mining must 
take place locally in the AdmGUl. 

Windows Spool (Port Monitor) 

It will now be possible to install a secure client on Win95 and Win98 in 
5 order to encrypt docunnent data while being transmitted to the SafeCom 
Server The Port Monitor is changed for this purpose. 

Install Program 

The install program will upgrade old databases to the new version introducing new 
10 tables. 

If InstallShield can create an install program which works on all platforms, only one 
install program is needed. Otherwise two install programs will be created. One for 
Win9x and Win NT 4.0, and one Win 2000. 

15 Accounting Server 

The Accounting Server manage all the input and output from the database, which hold 
the information needed for accounting. 

20 It will be a Win32 based process, not necessary running on the same machine as the 
SafeCom Server. By request and replies, and through the TCP/IP protocol, it will 
communicate with the SafeCom Server and the Job Database in order to update the 
accounting database. Also it will be responsible to extract information from the 
accounting database and export it to a file. 

25 

Interface Describtion 
Requests and Replies 
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This section describes all interfaces with respect to which requests and replies they 
consist of. 

Interface 1 - SCFE Protocol 

5 The purpose of the "SafeCom Front End" protocol is to make it possible for the control 
unit to send and receive information from/to the front end. This includes notifications 
about key pad events and card reader events as well as methods used to control of the 
LCD display. 

Interface 2 - SafeCom Server 

10 

The SafeCom server interface provides methods for login, and enumeration of owned 
documents in the database. Also the interface holds requests and replies used for 
identification purposes: One request/reply pair is used to identify the SafeCom server 
and another pair is used to identify the printer attached to the front-end unit. With 
15 "SafeCom Accounting" interfaces for accounting is added. 

Note: The SafeCom Server is kind of a control channel. 
Interface 3 - Job Database 

20 

The job database interface provides methods for login, enumeration of owned 
documents, user administration and identification . With "SafeCom Accounting" 
interfaces for accounitng is added. 

Interface 4 - Print Engine 

25 

The print engine interface provides methods for login, enumeration, and retrieval of 
owned documents. While retrieving data, the client can send a request that cancels the 
upload action. 

30 Note: Print channel. 
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Interface 5 - Native Windows 

The SafeCom system does not modify the client machine submitting documents in any 
way. Normally the windows spooler uses a proprietary format transferred using NetBeui. 
5 It is however possible to use other protocols such as the TCP/IP based LPR/LPD 
protocol. 

A detailed description of this interface is therefore not needed in this document. 

Interface 6 - Native Printer 

10 

When the SafeCom control unit sends data to the printer, it will be done using a parallel 
cable. Formally the transport protocol is called "Centronics". The data transferred is not 
formatted in any manner, it is just RAW data. An specification of PIN assignments and 
their use will not be supplied here. 

15 Interface 7 - Accounting Server 

The Accounting Server interface provides methods for login, starting and stopping the 
accounting process, and to recieve printing information continuously from the Control 
Unit via the SafeCom Server. 

20 Broadcast Server 

The Broadcast Server is used to identify which Safecom components are running on the 
network. It also holds methods to configurate the SafeCom components. 

25 Examples 

Example - Printing a document 

User prints one document, using "print and pay", and leaves, as shown in figure 5. 

Example - Connecting 
30 Figure 6 shows how SetDevicelnfo and NotifyPrinterlRQ are used. 
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REQUIREMENT SPECIFICATION 

5 General 

Abbreviations 



SS SafeCom Server 

PE Print Engine 

JDB Job Database 

CU Control Unit 

FE Front End 

AS Accounting Server 

AdmGui SafeCom Administration Tool 



Brief Product Description 

This document describes the requirements to the project "SafeCom Accounting". The 
10 project is based on the product described as "SafeCom". Except if explicitly noted 
herein, all functionality and behavior implemented in "SafeCom" applies to "SafeCom 
Accounting". 

The different components of *'SafeCom Accounting" will run on the following platforms. 

WinNT 4.0 at Win95 Win98 Win200 
Service Pack 0 
4+ 

Server Software X - - X 

AdmGui X XXX 

Secure Client X XXX 

with billing dialog 
and 

Distribution 
dialog. 
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Highlights: 

• Accounting using page-count of the physical printer. Reference printers used during 
development will be HP 8100, HP 4500 Color and Lexmark 2455/3455 

• Page count will be implemented both in hardware and in software. The hardware will 
obtain page count information by issuing PJL commands at the beginning and the 
end of each printed job. Postscript capable printers will be queried for page-count 
information, by embedding a postscript application capable of reporting back to the 
control unit. The software will obtain page count information by scanning the 
submitted data. The software will be capable of understanding the following data 
streams: PCL, PS, PCL-XL. Naturally the accounting-server will log how the page- 
count was obtained. Typically hardware page-count will be weighted above software 
page-count. The control unit decides which page count is to be used for each 
individual job. 

• Supports Print-and'Pay by exporting data from the "SafeCom Accounting" database. 
The solution requires a professional accounting program, capable of viewing the 
exported data and charging accordingly. 

• Secure client for Win98 and Win95 

• The software can install and run under Windows 2000. There will be no support for 
remote client installations, MMC management etc. The software can simply be 
installed using the same install program as for WinNT 4.0. 

• Simple data mining in Admin GUI 

• Billing dialog shown on client machine at print submission time. 

• Distribution dialog shown on client machine at print submission time. The distribution 
dialog will enable a user to 'mail' a document to other people. As added feature the 
submitter can specify a interval in time where the document will exist (document 
lifetime). This can be used to make a document appear at a specified time and to 
ensure that the document expires (is deleted) at some other point in time. 

Software Description 

The main ambition of the "SafeCom Accounting" project is to improve "SafeCom" with 
tracking capabilities. Tracking requires that the CU is capable of counting the actual 
number of pages printed on the physical-printing device. Subsequently, the CU must 
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report pages printed to the SafeCom Server, so the person printing the document, can 
be charged accordingly. 

The tracking mechanism implemented is this version of SafeCom Accounting is also 
known as "Print and Pay". 

Print and Pay 

Users using the "Print and Pay" mechanism, will be charged at some time after the 
actual printing is performed. "SafeCom Accounting" merely keeps track of how many 
pages the user is printing. This information can be exported to a file and imported into a 
professional accounting system capable of creating invoices. Since an invoice typically 
needs some degree of detail information, we have chosen to log almost everything we 
know about each printed job (se description of the "accounting table" below) 

Since this is not a design document, we will ignore details about how the page 
information is handled by the server software. The end result will however be, that the 
server software maintains a table in its database with entries for all printed jobs. Each 
entry holds information about: 

• Who printed the job 

• Where the document was printed (on which printer) 

• Printer classification tag (used to categorize printers in different pricing groups) 

• When It was printed 

• Properties of the job itself (duplex, pages, copies, etc.) 

• Job Status (Job is being printed , Job successfully printed, Job aborted during 
printing) 

• Billing info (A configurable string chosen by the client at submission time). 

The entries in the accounting table are never automatically deleted from the database. It 
will be possible through the AdmGui to delete old entries from the accounting table. The 
deleted entries will be serialized to disc before deletion. This makes it possible to query 
the database for historical information. 
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Billing Mechanism 

Customers have requested a mechanism, where the client is forced to tag each print job 
with one of several configurable categories. The AdmGui must be able to configure 
different categories for each user. This will enable the customers to keep track of which 
5 category a printed document is printed in combination with, which is a feature that 
enables the customers to keep track of for example a projects use of paper. 

The secure client, who is in charge of displaying the dialog, will need to retrieve all 
categories available to the user, before displaying the billing dialog. 

10 

It must be configurable whether the billing dialog Is to be displayed or not. The most 
flexible approach is to control this from the AdmGui, and let the information flow to the 
secure client when it tries to retrieve a users-list of categories. 

15 Creation and assignment of categories are performed centrally using the AdmGui 
The billing system will use the users network login as user authentication scheme. 

Print Distribution Mechanism 

Customers have requested a mechanism than enables a client to distribute the same 
document to more than one user. This is achieved by displaying a window at print 
20 submission time, where the document author can select between different distribution 
groups (mailing lists). After selection the document will be sent to all individuals of the 
selected group. 

To avoid flooding of the job database, the document data itself, will be kept in one 
25 incarnation only. Each user receiving the document will in reality only own a "reference" 
to the document, which can be deleted without any impact on the other users. Only 
when the last user referring the job, has deleted the job reference, will the physical 
document data be removed from the harddisk. 

30 Conceptually a job always has one job awf/7or (being the user that submitted the job) 

and several job owners. The owners can print the job and chose to delete or retain their 
reference. Deletion of references simply means just that. A job will be deleted from the 
system only if all references have been deleted. 
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Configuration of distribution groups is done using the AdmGui. Also, the AdmGui makes 
it possible to assign the various distribution groups to different users. When a user is 
distributing jobs, she will be allowed only to distribute to those groups that have been 
5 assigned to her. 

When a user sumnnits a document she can specify an interval in time, where the 
document exists. This interval defines the lifetime of the document. A document will 
appear in its owner's queue, as soon as the current date-time lies within the document 
10 lifetime interval. When the document expires in lifetime it will be deleted from the 
system. 

Transmission Performance Optimization 

Ail sen/er components in "SafeCom Accounting" uses the "SafeCom Secure TCP/IP" 
15 protocol for communication -even if they reside on the same machine. This is not 

optimal, since there is no need to encrypt data between inter-process boundaries. Also, 
the TCP protocol itself is very slow compared to dedicated inter process communication 
algorithms. SafeCom Accounting will use an improved version of the "SafeCom Secure 
TCP/IP" communication protocol, which use secure TCP/IP between processes on 
20 different machines and fast inter-process communication between processes on the 
same machine. 

Configuration 

Upgrade old databases to new versions directly from installer 
25 New versions of SafeCom introduce new tables in the database. It is required that the 
installation program is capable of upgrading an existing database to the new format. 

Administration 

Just like SafeCom the "SafeCom Accounting" project will be administered using the 
30 AdmGui. New functionality is the ability to: 

• Export data from the accounting table to a file that can be interpreted by other 
products. 
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• Perform simple data mining in the collected data. 

• Define new billing categories and assign them to users. 

• The AdmGui will enable the user to specify an email mask used when creating new 
users. The idea is that if the administrator enters the email mask "@i-data.com" then 

5 all new users will be assigned the email address "user ld@i-data.com" automatically. 



Export functionality 

It will be possible to export data from the accounting table to a file that can be 
interpreted by other products. To maximize integration ease we will use a data format 
10 that is immediately readable by most database tools (ODBC file, comma-separated file, 
or similar.) The exported data will initially be exported to a comma-separated file. If time 
permits it we will implement other export formats. 

Along with the exported data, will be a so-called schema file. The schema file 
1 5 documents all exported fields with respect to their individual name and data type. The 
format of the schema file will be the format demanded by the Delphi TTable component. 
This will ensure, that the Admin GUI can immediately import the exported data (no need 
for writing a scanner, parser etc.). 

20 The electronic manual will have a section that describes the format of the exported data. 
The section will include an example that describes how to import the exported data into 
Microsoft Excel or Microsoft Access. 



Simple data mining 

25 "SafeCom Accounting" always maintains the accounting table. It is therefore possible to 
use the AdmGui to perform simple data mining in the collected data. The AdmGui will 
display the following statistical information. 



1 . An overview of how many pages each user has printed during a given time period 
30 2. An overview of the total number of pages printed on the various printers 

3. An overview of how many print jobs that is accounted to each defined category. The 
overview must include the total amount of printed pages for the given category. 
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As in all window progranris it will be possible to print the graphs to the Microsoft spooling 
system. 

Billing categories 

5 When submitting print to "SafeCom Accounting", the client will be presented with a 
dialog prompting for a category assignment. The categories shown are only those 
categories that have been assigned to the user. Creation and assignment of categories 
are performed in the AdmGui. 

1 0 Distribution groups 

It will be possible to create new distribution groups and assign them to users. The users 
of the system can distribute to those groups that have been assigned to them. It is also 
possible to enable/disable distribution for each user. This has no impact on the lists 
assigned to the users. If distribution is disabled, the distribution dialog will simply not be 

15 shown to the user at print submission time. 

Hardware and software environments 

Secure Clients for Win9x 
20 The port monitor will be ported to Win9x, to enable secure submission of document 
data. In order to make a client machine SafeCom capable, it will be necessary to install 
the software from the CD-ROM. 

Windows 2000 

25 All components in SafeCom Accounting will be Win2000 compliant. This does not imply 
that SafeCom is ready for Win2000 certification. The software can be installed using the 
NT4.0 installer and it can be configured and executed exactly like on an NT 4.0 system. 
Missing for full Win2000 integration is MMC management (Microsoft Management 
Console), Remote client installation, full UNICODE support (NLS) etc. . 

30 

Backward compatibility 

The new server software will be able to service old clients (GA version). This includes 
old control units as well as old secure clients. Jobs printed from front-ends running old 
GA-firmware will not be able to report hardware page-count information back to the 
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servers. Instead the servers will use the calculated software page-count Information for 
jobs printed on the old devices. 

It is of course highly recommended that the users quickly port their installation to the 
5 new software level. However, since this can take several days -it is essential that the 
system also functions during the transition period. 

Since some of the control units will be updated with new firmware, it is important that 
the control units function on both old and new servers. 

10 

SafeCom Unit Description 

The SafeCom Unit consists of a "Front End" as well as a "Control Unit". 

15 The front end is equipped with a touch sensible LCD display, and a magnetic card 
reader. Basically the Front End functions as the users terminal at the printer. From a 
hardware point of view, the Front End used in the "SafeCom Accounting" project is 
identical to the one used in the "SafeCom" project. 

20 The control unit used could theoretically be any i-data print server that is equipped with 
a RS-232 interface. The "SafeCom Accounting" project in its first version will use the 
"EasyCom Xpress" unit as print server. 

During the months following the release of SafeCom, we have received requests from 
25 customers asking for various small changes, which would make the system user- 
friendlier. The following list enumerates those changes that will be implemented as a 
direct consequence of the requests. 

• During installation the user is sometimes required to edit a list of IP broadcast 
30 masks. This is difficult to do, since practically all our users have no clue as to what a 
broadcast mask is. As solution the "Front End" will show a hint stating that the user 
can enter the IP address of the "SafeCom Server" instead. 
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• The "retain" option does not function as expected, as the docunnents lose their 
"retained" state, after the user exists her session on the "Front End". Also, when 
displaying the list of jobs, it would be nice to be able to see which docunnents are 
retained and which are not 

5 

• When discovering the various SafeCom servers, multiple server entries appear for 
the same installation. This is confusing and will be avoided by changing the identify 
mechanism implemented in the servers. 

10 Hardware Description 

No hardware changes are necessary. 

Mechanical Description 
15 N/A 

Electronic Description 
N/A 

20 Configuration 
N/A 

Quality Consideration 
N/A 

25 

Specifications 
N/A 

Test Specification 

30 

Reporting 

The following reports are required: 

• BPT report 
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Reporting will be done using incident reports 

5 

Pass/Fail Criteria 

The pass criteria for DVT: 

• No severity 1 or 2 incidents with status Open, verified 

10 • Less than 10 severity 3 incidents with status Open, verified. 

Test Area 

The DVT test will focus on the following areas: 

1 5 Test of the SafeCom SW on the NT Server 

• Installation 

• Usage of GUI 

• Security 

• Stress 

20 

Test of the SafeCom Control Unit 

• Installation, 

• Boot plus micro code upgrade 

• Configuration, 

25 • Multiple SafeCom Control Units 

• Error recovery 

Test of the SafeCom Front End Unit 
30 • Usage 

• Micro code upgrade 

• Error recovery 
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Test of usability of SafeCom system 

• Performance of SafeCom system 

• Test of the reliability of the page detection algorithm 

5 Test Environments 

The test will be done in the environments listed underneath: 

• NT 4.0 Server Server code, Port Monitor, AdmGui 

• Win95 Port Monitor, AdmGui 

• Win98 Port Monitor, AdmGui 
10 • Win2000 AdmGui 

Various Microsoft NT file systems will be used 

• NTFS 

• FAT 

15 

Various Printers e.g. HP 8100, HP 4500 Color and Lexmark 2455/3455 

SAFECOM ACCOUNTING 

General 

20 

Intent 

All users currently running SafeCom could (and should) upgrade their SafeCom version. 
The reason is that we have made significant improvements in overall system 
performance as well as to the auto configuration mechanisms used. 

25 

It is possible to create two versions of the new SafeCom version - one with and one 
without accounting support. There are currently no plans of doing this; instead we plan 
for one release featuring all new functionality. 

30 Availability 

SafeCom Accounting is made available for sales late Q1 year 2000. The project itself is 
estimated to exit DVT 18/02-2000. This means that the GA date will be approximately a 
month from this date. This depends on the length of the alpha and beta test periods as 
well as the time it takes to produce the final CD-ROM. 
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Compatibility 

During installation the product will check for an older version, and if located it will 
upgrade the old version in such a way that no data is lost. This applies to the old 
5 configuration data as well as to the old job data and user data. 

The product will be able to work with print servers running old SafeCom firmware. In this 
case the hardware page-count nornnally propagated back to the servers will be 
unavailable, and a software page-count generated at submission time will be used. 

10 

Headlines 

• Distribution (enabling users to distribute jobs to one or more users at print 
submission time) 

15 • Billing (forcing users to tag documents at print submission time) 

• Tracking (tracking documents as they are printed - pages, printer, user, time, date, 
billing info) 

Abstract 

20 SafeCom Accounting is a new version of SafeCom that supersedes the old SafeCom 
versions. The version enables the user to track resource usage, and to export the 
tracking data to a comma-separated file. The format of the exported material is readable 
by spreadsheet programs like Microsoft Excel. The configuration program used to 
configure SafeCom (the AdmGui), has been enhanced with functionality, that enables 

25 the user to perform data mining on the exported material. 

The different views are: 

• Total print usage for each user 

• Total print usage for each printer 

30 • Total print usage for each billing category 

Billing is a mechanism that enables the user to tag a print job at submission time. The 
tag will follow the document until it is deleted. Each time a user prints the document, the 
tracking system will log information about the document, the user, the time of day and 
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among other things the billing tag. The data-mining module therefor has all needed 
information available for generating summaries over the total print usage for each billing 
category. 

5 New is also a mechanism enabling a user, to submit a printed document to other users 
of the system. The mechanism is called 'distribution' and it allows the Administrator to 
configure various distribution lists, and assign these to users of the system. When a 
user submits a document she will be presented with a dialog prompting for information 
about who is to receive the document. 

10 

Details 

Accounting/T racking 

As the name "SafeCom Accounting" implies, we have weighted accounting abilities 
15 really high, when we defined this new version. The ambition was to create a mechanism 
that would enable SafeCom to continually keep track of page use. Once you start 
implementing this, you realize that the task is more complicated than you would think. 
The problem lies in establishing a reliable means of obtaining a page-count information. 

20 The solution to the problem is twofold. 

1 . When data is submitted to the SafeCom database, the submitting application (the 
port monitor) analyses the data-stream, and generates an estimate as to the number 
of pages in the job. This page-count (called the software page-count) is passed 

25 along with the job and placed in the database. The data-streams, recognized by the 
port monitor, are PCL, PCL-XL and PostScript. 

2. When data is printed, the SafeCom hardware (the control unit) will use various 
methods to retrieve a page count from the physical printer. There are several 
techniques used, although the most important is to have the control unit issue PJL 

30 commands before and after each job. Since not all printers support PJL, we are 

working on an alternative mechanism, where a PostScript program is submitted to 
the printer, and made responsible for reporting page count information back to the 
control unit. 
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SafeCom Accounting tracks down a broad range of information. The idea is to collect as 
much relevant information as possible, and use the information later on, when we need 
it for data-mining purposes. We only store static information, and purposely leave out 
policy dependant things like the price of a job. As a rule of thumb, one can say that we 
5 store information that can be measured in exact units and leave out information that can 
be deducted from the stored information. This approach gives us a tremendous 
advantage, when it comes to implementing new accounting strategies, new graphs, etc. 



The information stored is as follows: 



10 



15 



Base information 



User information 
Printer/Print server 
information 
Job information 

Billing information 



Date, StartTime, EndTime, Copies, TotalPages- 
HW/SW, 

State (Job_Started, Job_Completed, 

Job_lnterupted) 

UserName, Email 

MAC, PrinterName, IP-Addr, Location, DeviceModel, 
DuplexSupported, ColorSupported 
Job name, JoblsDuplex, JoblsColor, 
DeviceDriverUsed 
Client Name, Account 



Billing Mechanism 

In some organizations it is desirable to enable or force the users to categorize jobs at 
submission time. Such information can be used afterwards to calculate prices or to 
analyze the collected data. As an example the billing functionality could be used to force 
each submitting user to select which "project" a print job should belong to. The user 
would be shown a dialog when trying to print, and prompted to select one of the listed of 
project numbers, before the document was printed. 



The AdminiGui of SafeCom Accounting will enable the administrator to create new 
20 billing categories and assign them to one of more users. A billing category is an ordered 
pair of respectfully a Client Name and an account. An examplary configuration could be 
as follows: 
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Account 

3443 324252 
5675 324253 
3453 899976 
102.304/11 

102.304/12 

102.272/11 
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Assigned users 

Brian, Mark 
Brian 
Brian 
Mark 

Brian, Mark 
Joe, Brian, Mark 



10 



Client 

Microsoft 
Microsoft 
Microsoft 
i-data Printing 
Systems 
i"data Printing 
Systenns 
i-data Printing 
Systems 

Distribution Mechanism 

The distribution mechanism enables a user to submit a print job to a group of users. 
Since this means placing documents in other peoples private queues, it is possible to 
configure which users have this privilege. 

The Administrator of SafeCom can use the AdmGui to define distribution lists (each 
containing one or more users). After this is done, the Administrator can assign users the 
right to distribute jobs to these lists. This means that it isn't possible for the user, to 
create a new distribution list at submission time. Only the pre-defined lists can be 
chosen from. 



When submitting a document to others, it really means submitting a reference to a 
document to a user. The physical data represented is thus not copied again and again 
since this would flood the hard disk of the server machine. SafeCom keeps track of 
15 when to delete the physical data, naturally as long as someone references the job, the 
physical data stays on the hard disk. 



General issues 

SafeCom Accounting uses an improved version of the SafeCom communications 
20 protocol. The structures, passed around by the protocol, have basically been 

strengthened with new fields, including fields meant for future expansion purposes. This 
means that we can create new SafeCom releases without significantly changing the 
protocol, which is a major advantage. 
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We have made major changes to the discovery method used by the various system 
components when they need to locate each other. As before we use an UDP network 
frame, to request responses from the other components. The change lies in the 

5 responses, where we among other things send back a list of all TCP/IP addresses 
assigned to the component. Earlier we just sent back the network address that the 
request was received on. The advantage is, that all replies from a component will be 
identical (they all send back the same list). A client receiving the response can thus 
iterate through the list until it locates an entry that it has a route to. This may seem like 

10 an insignificant change, but it actually means, that the discovery mechanism is many 
times more reliable than before. 

The one reason why the first release of SafeCom was rather slow was, that we used 
TCP/IP as a means of inter-process communication (communication between 

15 components running on the same server machine). TCP/IP is really annoying when it is 
used locally, as it spends most of the CPU time, waiting for an event that never occurs. 
The reason why it does this is a bit complicated, but can shortly be explained as follows: 
When a packet is to be transmitted it is split up in smaller chunks. Each of these is sent 
to the receiver in separate network frames. Since the last frame Is usually only partially 

20 used, it makes sense to examine if there is more data that is to be sent. When used 

locally, the TCP/IP protocol waits for about 200ms for this to happen, until it finally times 
out and sends the frame. In SafeCom there never is any extra data to send, which 
means that the TCP/IP protocol wasted 200ms each time it needed to send data from 
one point to another. To circumvent this, we use new communications protocol for local 

25 connections. The protocol is called "LocalPipe" and it performs really well. The 

performance gain from this change has been measured in average to about 10 times 
faster than before. 

SOFTWARE DESIGN SPECIFICATION FOR "Interfaces" 

30 

General 

This part describes the interfaces that are offered by the SafeCom system inclusive 
accounting. The following interfaces are described: 
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• JobDatabase interface 

• PrintEngine interface 

• SafeCom Server interface 
5 • BroadcastServer interface 

• Accounting Server interface 

Each interface is described by comnriand, followed by arguments, and the replies to the 
command. Finally the security level for the command. The security level is divided into 
1 0 three levels. Lowest is User, second is PowerUser and above all is the Administrator. 
When a security level is denoted it means that level and above. 

The first part gives a description of definitions. After this section is given an overview of 
the five interfaces described in this document. Then the common requests and replies 
1 5 among the interfaces are described. Finally the server specific requests and replies are 
described. 

Interface History 

20 All transaction-elements have a version field, used to identify which interface version the 
request or reply belongs to. The following table summarizes existing interface versions. 

Interface Product Name Project Number S-number 



version 



1 



SafeCom 



102.304/11 



070.010 



2 



SafeCom Accounting 102.304/1 1 



070.030*nn 



Type definition 



25 StructType 



The element type can be : 



Name 



Value 



Commnet 
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Comment 

Length of struct 
Version Number (set to 2) 
Version of achReserved (set to 0) 
6 byte MAC address of device 
4 byte IP Address of device 
Ready(O), InterventionRequired(l) 
Bitfield (See below) ' 



DevicelnfoStruct2 

Length Field 

4 m_nStructLength 

2 m_nVersion 

2 m_nSubVersion 

6 m^achDeviceMAC'' 

4 m_n Device I pAd d r 

2 m_nDeviceStatus 

4 m_achDeviceStatusDescript 
ion 

2 m_nDuplex 

2 m_nColor 

8 m_fPricePrPage 

4 m_nSupportedPaperTypes 

2 m_n N u mberOf Formats 

32 m_ach Reserved 

+ m_szDeviceName 

+ m_szLocation 

+ {Format2}* 



Does device support Duplex? Yes(1), No(0) 

Does device support Color? Yes(1), No(0) 

Price pr page printed 

A4 (1), A3 (2), LETTER (4), TBD (>2^2) 

Number of elements in Format list 

Reserved for protocol extensions (zero 

padded) 

Name of Device. Must be unique for devices 
on same MAC 

Free format string defining location of device 
wrapped by m__achData 



DeviceStatusDescription 

Placement in array Status - Yes(1), No(0) 



Byte 0 " Bit 7 Printing 

Byte 0 ~ Bit 6 MemoryShortage 

Byte 0 - Bit 5 PaperOut 



^ A printer uniquely identified by its MAC and DeviceName 
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Byte 0 - Bit 4 
Byte 0 - Bit 3 
Byte 0 - Bit 2 
Byte 0 - Bit 1 
Byte 0 - Bit 0 



PaperJam 

TonerOut 

DeviceOffline 

0 

0 



Byte 1 - Byte 3 



Format2 



0 



-for source and target 

Length Field 

4 m_nStructLength 

2 m_nVersion 

2 m^nSubVersion 

4 IformatType 

8 m_achReserved 

+ SzSpecialFormat 



Comment 

Length of the struct including this field 

Version Number (set to 2) 

Version of achReserved (set to 0) 

PCL4 (1), PCL5 (2), IPDS (3), PS (4), 

ICDS (5), SPECIAL (6) 

Reserved for protocol extensions (zero 

padded) 

Describes the fornnat if iFormat=SPECIAL 



FakturalnfoStructV2 



Length 


Field 


Comment 


4 


nri_nStructLength 


Length of the struct including this field 


2 


nn_nVersion 


Version Nunnber (set to 2) 


2 


m^nSubVersion 


Version of achReserved (set to 0) 


2 


nn_nStructType 


stFaktura 


4 


m__nBillingld 


Unique id of this billing entry 


4 


m_nBillingNid 


Unique node id of this billing entry 


2 


m_nlsGroup 




32 


m_ach Reserved 


Reserved for protocol extensions (zero 






padded) 


+ 


szClient 


Description 
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Name 



IdentifyStruct2 

Length Field 

4 m_nStructLength 

2 m_iVersion 

2 m_nSubVersion 

2 m^nlpPort 

4 m_nType 



m ach Reserved 



Comment 

Length of the struct including this field 
Version Number (set to 2) 
Version of achReserved (set to 0) 

Bitfield defining server type 

0x01: Print Engine 

0x02: SafeCom Server 

0x04: Port Monitor 

0x08: Job Database 

0x10: Accounting Server 

Reserved for protocol extensions (zero 

padded) 



JoblnfoStruct2 



Length 


Field 


4 


m_nStructLength 


2 


m_nVersion 


2 


m_nSubVersion 


4 


m_nJobld 


4 


m_nBillingld 


4 


m_nGroupNid 


4 


m_nSize 


4 


m_nPages 


2 


m_nDuplex 


2 


m_n Color 


21 


m_szOwner 



Comment 

Length of the struct including this field 
Version Number (set to 2) 
Version of achReserved (set to 0) 
Unique id identifying the job 
Unique id for entry in billing table 

Size of document 
Pages in document 
YES(1), NO(0) 
YES(1), NO(0) 

UserLogon of job owner (zero 
terminated). 
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21 m szAuthor 



8 nn_achDate 

6 m_achTime 

8 m_achLifeStartDate 

6 m_achLifeStartTime 
8 m^achLifeStopDate 

6 m_ach LifeStopTime 
2 m_n DestroyAfter F i rst Dele 
te 

4 m_nAccountingTag 
2 m_b Retained 
32 m_ach Reserved 

+ Format2 
+ szJobName 
+ szPageFormat 

PrintJoblnfoStruct2 

Length Field 

4 m_nStructLength 

2 m_nVersion 

2 m nSubVersion 
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Owning a job means having the job in 
ones print queue) 
UserLogon of job author (zero 
terminated). 

The author is the user that submitted 
the job into the job database. 
Submission date of entry in the job 
database 
(dd-mm-yyyy) 

Submission time of entry in the job 

database (hh-mm-ss) 

The job is accessible by its owners 

from this date-time and forward, 

(dd-mm-yyyy) 

(hh-mm-ss) 

The job is accessible by it's owners 
until this date-time is reached. The 
job is then deleted, (dd-mm-yyyy) 
(hh-nnm-ss) 

Reserved for later use 
Retained(O), Not retained(1) 
Reserved for protocol extensions 
(zero padded) 
Document Format 
Title of document 
Page Format as String 

Comment 

Length of the struct including this field 
Version Number (set to 2) 
Version of ach Reserved (set to 0) 
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4 m_nJobld 

4 nn_nBillinglcl 

4 m_nGroupNid 

1 m_uch Printable 

4 m_nDocumentSize 

4 m_n Pages 

2 m_nDuplex 
2 m_nColor 

8 m_achDate 

6 m^achTime 

8 m_achLifeStartDate 

6 nri_achLifeStartTime 

8 m_achLifeStopDate 

6 m_achLifeStopTime 

21 m_szOwner 

21 m szAuthor 



2 m_nDestroyAfterFirsiDelet 
e 

4 m_nAccountingTag 
2 m_bRetainecl 
2 m_nNunnberOfTargetForm 
ats 

32 m ach Reserved 
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Unique id identifying the job 
Unique id for entry in billing table 

YES(1), NO(0) 
Size of document in bytes 
Pages in document 
YES(1), NO(0) 
YES(1), NO(0) 

The date of entry in the job database 
(dd-mm-yyyy) 

The time of entry in the job database 
(hh-mm-ss) 

The job is accessible by it's owners 
from this date-time and forward, 
(dd-mm-yyyy) 
(hh-mm-ss) 

The job is accessible by it's owners 
until this date-time is reached. The job 
is then deleted, (dd-mm-yyyy) 
(hh-mm-ss) 

The user logon name that submitted 
the job 

UserLogon of job author (zero 
terminated). The author is the user 
that submitted the job into the job 
database. 

Reserved for later use 
Retained(O), Not retained(l) 
Number of Target Formats in list 
below 

Reserved for protocol extensions 
(zero padded) 



RF-2000-01-28-G:\097\696\M_EB.doc 



51 

+ Format2 Source Format 

+ {Format2}* List of possible target formats 

+ szJobName Job Title 

+ szPageFormat Page Format as String 

UserlnfoStruct2 

Length Field Comment 

4 m_nStructLength Length of the struct including this field 

2 m_nVersion Version Number (set to 2) 

2 m_nSubVersion Version of achReserved (set to 0) 

2 m_nStructType stUser 

4 m_nUserld Unique id identifying the user 

4 m_nUserNid Unique node id of user 
2 m^nlsGroup YES(1) | NO(0) 

2 m_nGroupEnabled 

21 m_szUserLogon Asc-ii string identifying the user 

17 m^szPassword Asc-ii string password 

40 m_szCardNo Card number 

5 m_szPINCode PIN code - zero terminated 
9 m_szPUKCode PUK code - zero terminated 
2 m^nLogonFails Number of failed logins 

2 m_bUserLocked Unlocked(O), Locked(1) 

2 m_bAvoidPin Pin Enabled(O), Pin disabled (1) 

2 m^bCardOpen PIN code assigned{0), 

Awaiting pin assignment/Outstanding 

PUK(1) 

8 m_fAccount Credits left for the user 

2 m_nBillingModel None(O), (l)BjllingDialogl 

2 m„nAccountingModel None(O), PrintAndPay(l), PayAndPrint(2) 

32 m__achPermissionFlags An array of chars, each describing actions 

that a user has permission to perform. 

The table below shows which actions the 
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32 m_ach Reserved 

+ szFullName 
+ szDescription 
+ szEMail 

Permission bit-field assignment 
Placement in array Request 



ByteO 


canActAsUser 


Byte 1 


canSubmitJob 


Byte 2 


canRetrieveJob 


Byte 3 


canAdministrateUsers 


Byte 4 


canAdministrateAccounting 


Byte 5 


canAdministrateBilling 


Byte 6 


canAccounting 


Byte? 


canBilling 


Byte 8 


canConfig 


Byte 9 


canAdministrateNids 


Byte 10 


CanGetUserlnfoList 


Byte 1 1 


CanChangePinCode 


Byte 12 


CanDeleteJob 


Byte 3-31 


Unused (set to 0) 
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individual bytes associate to. 
Reserved for protocol extensions (zero 
padded) 

wrapped by m_achData 



The following requests can be issued without being logged in and thus requires no 
permission flags: GetDevicelnfo, SetDevicelnfo, Notify Device I rq, GetPrinters, 
GetPrintEngine 

interfaces - Overview 

If a server receives data that cannot be recognized as one of the requests below, 
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it will return an UnknownReply with status SC_UNKNOWN_REQUEST. If the server 
receives a newer version of a known command than it can handle, it will return an 
UnknownReply with status SC^UNSUPPORTED^VERSION. 



SafeCom Server 
SafeCom Server 
(Common 
Commands) 

LoginByCardNo 

LoginByUserLogon 
Logoff 

ChangePlNCode 

DeleteJob 

SetPrintJoblnfo 



Arguments 



CardNoxPinCode 

UserLogon X Passwor 
d 

None 

NewPINCode 

Jobid 

Jobldx 

PrintJoblnfoStruct2 



Reply 



Status, 

UserlnfoStruct2 
Status, 

UserlnfoStruct2 

Status 

Status 

Status 

Status 



Security 
Level 

A,PU 

U 
U 
U 
U 



OpenCard 

UpdateFromRegistry 
GetPrinters 

GetPrintEngine 



SetDevicelnfo 



GetDevicelnfo 



Card Nox PU KCodex Status 
PINCode 

Status,{szDevice- 
Driver Names}+ 
Status, 

{PE-lpAddr}, PE- 
IpPort 

{DevicelnfoStruct2}+ Status, 

SenseCode 
Status, 



SourceFormat x 
TargetFormat 



^ This login request cannot be used to obtain Administrator or Power User privileges. 
Only LoginByUserLogon will do this. If an Administrator logs in by card number, she will 
be granted access to the system with user privileges only. 
^ It is always possible to issue this request even if not logged on. 
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SenseCode,{Dev!c 
e-lnfoStruct2}+ 
NotifyDevicelrq {Device I nfoStruct2}+ Status, 

SenseCode 



StartAccounting 



NotifyPagesPrinted 



StopAcco u nti ng 



Jobld X 

PageCountModel x 
NumberOfCopies x 
DevicelnfoStruct2 
SessionID x 
DeltaPageCount 

SessionID 



Status, 

SenseCode, 

SessionID, 

CreditsLeft 

Status, 

SenseCode, 

CreditsLeft 

Status, 

SenseCode 



U 



U 



U 



SafeCom Server Arguments Reply 

(Spec. 

Commands) 

GetPrintJoblnfoList None NoJobs x 

{PrintJob- 
lnfoStruct2}* 



Always Security 
Encrypted Level 



No 



Job Database 
Job Database 
(Common 
Commands) 

LoginByCardNo 

LoginByUserLogon 



Arguments 



Reply 



U 



Security 
Level 



CardNoxPinCode Status, U"^ 

UserlnfoStruct2 

UserLogonxPasswor Status, A,PU 
d UserlnfoStruct2 



This login request cannot be used to obtain Administrator or Power User privileges. 
Only LoginByUserLogon will do this. If an Administrator logs in by card number, she will 
be granted access to the system with user privileges only. 
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Logoff 


None 


otatus 


u 


ChangePINCode 


NewPlNCode 


Status 


u 


OpenCard 


CardNoxPUKCodex 


status 


u 




PlNCode 






StartGetJob 


JobldxTargetFormat 


FileHandle 


u 


GetJobUata 


riienanaie x Lengtn 


Lsngin x uata 


f 1 

u 


CancelGetJob 


FileHandle 


Status 


u 


DeleteJob 


Jobid 


Status 


u 


SetJoblnfo 


Jobldx JoblnfoStruct2 


Status 


u 


UpdateFromRegistry 


_ 


- 




GetPrinters 




Status,{S2Device- 








Driver Names}+ 




SetDevicelnfo 


{DevicelnfoStruct2}+ 


Status, 


_ 






SenseCode 




GetDevicel nf o 




Status 








SenseCode,{Devic 








e-lnfoStruct2}+ 




NotifyDevicelrq 


{Device! nfoStruct2}+ 


Status, 








SenseCode 





Job Database Arguments Reply Securit 

(Spec. Commands) y Level 

ValidUserByCardNo CardNo Status, Userld PU 

ValidUserByUserLogo UserLogon Status, Userld PU 

n 



StartAddJob JoblnfoStruct2 Status, FileHandle U 

StartAddJobByUserld JoblnfoStruct2 x Status, FileHandle U 

Userld 

AddJobData FiieHandlexSize Status U 



^ It is always possible to issue this request even if not logged on. 
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CommitJob 
CancelAddJob 

GetJoblnfoList 



GetUserlnfo 
GetUserlnfoList 

GetUserlnfoByUserld 

Delete User 

AddUser 

ModifyUser 

AddPrinter 
RemovePrinter 

AddFaktura 
ModifyFaktura 
RemoveFaktura 
GetFakturas 



GetFakturaByld 

AllowUserToNid 
DenyUserFromNid 
GetUsersAllowedToNi 
d 



ofxData 

FileHandie 

FileHandle 

None 



None 
None 

Userld 

Userld 

UserlnfoStructZ 
UserlnfoStruct2 

szDeviceDriverName 
szDeviceDriverName 

FakturalnfoStruct2 
FakturalnfoStruct2 
Fakturald 
None 



NID 

NIDxNlD 
NIDxNID 
NID 



Status U 

Status U 

Status, NoJobs, U 
{JoblnfoStruct2}+ 

Status, NoJobs, PU 
{Joblnfo-Struct2}+ 

UserlnfoStructZ U 

NoUsers, A 

{UserlnfoStruct2}+ A 

UserlnfoStruct2 A 

Status A 

Status A 

Status A 

Status PU 

Status PU 

Status A 

Status A 

Status A 

Statusx A 
NoFakturasx 
{FakturalnfoStr2}+ 

FakturalnfoStruct2 U 

Status A 

Status A 

{N1D}+ A 



GetJoblnfoListByUserl Userld 
d 
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GetGraphByNid 

LinkNidToNid 

UnLinkNidFromNid 



NID 

NIDxNID 
NlDxNID 



Status 
Status 



U 
A 
A 



Configuration parametres: 



10 



SMTP Server Address 

Warning time 

Delete Time 

Sanity Clneck Time 
Email Warning 
MaxNoOfFailes 
EnforceEncryption 



x.x.x.x 

mm-dd-yyyy hh:mm:ss 
mm-dd-yyyy inh:mm:ss 
mm-dd-yyyy hhimm.ss 
1 Enabled 0 Disabled 
x>0 

1 Enabled 0 Disabled 



Print Engine 



Print Engine 

(Common 

Commands) 

LoginByCardNo 

LoginByUserLogon 
Logoff 

GetPrintEngine 



Arguments 



CardNoxPinCode 



Reply 



Status, 

UserlnfoStruct2 



UserLogonxPasswor Status, 

UserlnfoStruct2 



d 

None 

SourceFormatx 
TargetFormat 



Status 
Status, 

{PE-lpAddr}, PE- 



Security 
Level 

A,PU 
U 



= This login request cannot be used to obtain Administrator or Power User privtegss. 
Onl^oginBvUserUogon wii, do this. . an Administrator iogs in by card nunnber, she w,„ 
be granted access to the system with user privileges oniy. 
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IpPort 



StartGetJob JobldxTargetFormat FileHandle U 

GetJobData FileHandle x Length LengthxData U 

CancelGetJob FileHandle Status U 



Print Engine 

(Spec. 

Commands) 

GetTransformList 



Arguments 



None 



Reply 



Securit 
y Level 



Numberx{Transform}* U 



Broadcast Server 

Broadcast Server 
(UDP Command) 

Identify 



SetBroadcastList 



Arguments 



None 



Reply 



Security 
Level 



Ip-Addresses and 
port numbers for the 
various SafeCom 
components. 
{B road CastAd d ress} none ! 
+, GroupName 



Note: UDP Requests must be sent as UDP packets on port 5742 (unencrypted) 



Broadcast Server 

(Common 

Command) 

LoginByUserLogon 

Logoff 



Arguments 



Reply 



UserLogonxPasswor Status, 

d UserlnfoStruct2 

None Status 



Security 
Level 

A,PU 
U 
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Broadcast Server 
(Spec. Command) 

SetConfiguration 

GetConfiguration 

Accounting Server 

Accounting Server 

(Common 

Commands) 

LoginByCardNo 

LoginByUserLogon 
Logoff 



Arguments 

ProprietaryWin.ini 
like format 
None 



Arguments 



Reply 



Status 



Reply 



CardNoxPinCode Status, 

UserlnfoStruct2 

UserLogonxPasswor Status, 

d UserlnfoStruct2 

None Status 



Security 
Level 

A 



Proprietary Win.ini A 
like format 



Security 
Level 

A,PU 
A 



StartAccounting 



NotifyPagesPrinted 



StopAccounting 



Jobid X 

NumberOfCopies x 
DevicelnfoStruct 
DevicelnfoStruct2 
SessionID x 
AbsPageCount x 
PageCountModel x 
PageCountStatus x 
PageCountSenseCod 
e X PageCountlnfo 
SessionID 



Status, 

SenseCode, 

SessionID, 

CreditsLeft 

Status, 

SenseCode, 

CreditsLeft 



U 



Status, 



u 



u 



^ This login request cannot be used to obtain Administrator or Power User privileges. 
Only LoginByUserLogon will do this. If an Administrator logs in by card number, she will 
be granted access to the system with user privileges only. 
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SenseCode, 
CreditsLeft 

U pdate From Reg istry 



Accounting Server 
(Spec. Command) 

ExportAccountingTabI 
e 



Arguments 

StartDate, StopDate, 
Seperator, Target 
URL 



Reply 

Status, 

SenseCode, 

ExportCount 



Security 
Level 

A 



DeleteO Id Entries DeleteBeforeDate, Status, 

Target URL SenseCode, 

NumberDeleted 



Common commands, detailed 

UnknownReply 
Reply 

Length Field 



4 NMessageLength 

4 Ecommand 

2 Nversion 

4 Ncorrelation 

2 Estatus 



Comment 

Length of the message 
CLUNKNOWN^REPLY 
Version number (set to 2) 
Correlation to be returned by reply 
SC,UNSUPPORTED_VERSION 
SC UNKNOWN REQUEST 
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Comments 

An UnknownReply will be returned if and only if an unsupported datastream is received 
as a request. An unsupported datastream is either a request with an unknown 
'Command' field or an unsupported version of a defined request. 

LoginByCardNo 
Request 



Length Field Comment 

4 NmessageLength Length of the message 

4 Ecommand CLLOGIN_BY_CARD_NO_REQUEST 

2 Nversion Version number (set to 2) 

4 Ncorrelation Correlation to be returned by reply 

40 SzCardNumber The card number read on the SafeCom unit 

5 SzPinCode The pin code read on the SafeCom unit 

Reply 

Length Field Comment 

4 NmessageLength Length of the message 

4 ECommand CLLOGIN_BY_CARD_NO_REPLY 

2 Nversion Version number (set to 2) 

4 Ncorrelation Correlation from Request 

2 Estatus SC_SUCCESS 

SC_FAILURE 

+ SuserlnfoStruct2 Struct describing the user 



10 Comments 

This command can only give the client user rights to the job database. 

Log/nByL/serLogon 
Request 

Length Field Comment 



4 NmessageLength Length of the message 

4 Ecommand CLLOGIN_BY_USER__LOGON_REQUES 

T 

2 NVersion Version number (set to 2) 
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4 NCorrelation Correlation to be returned by reply 

21 SzUserLogon The user logon 

17 SzPassword User personal password 

Reply 

Length Field Comment 

4 NMessageLength Length of the message 

4 ECommand CLLOGIN_BY_USER_LOGON„REPLY 

2 NVersion Version nunnber (set to 2) 

4 NCorrelation Correlation from Request 

2 EStatus SC_SUCCESS 

SC_FAILURE 

+ SUserlnfoStruct2 Struct describing the user 



Comments 
None 



Logoff 






Request 






Length 


Field 


Comment 


4 


NMessageLength 


Length of the message 


4 


eCommand 


CI_LOGOFF_REQUEST 


2 


nVersion 


Version number (set to 2) 


4 


nCorrelation 


Correlation to be returned by reply 


Reolv 






Length 


Field 


Comment 


4 


nMessageLength 


Length of the message 


4 


eCommand 


CLLOGOFF_REPLY 


2 


nVersion 


Version number (set to 2) 


4 


nCorrelation 


Correlation from Request 


2 


eStatus 


SC_SUCCESS 



SC FAILURE 



Comments 
None 

StartGetJob 
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Request 



Length Field Comment 

4 NMessageLength Length of the message 

4 ECommand CI_START_GET_JOB_REQUEST 

2 NVersion Version number (set to 2) 

4 NCorrelation Correlation to be returned by reply 

4 NJobId Get document associated with unique job id 

+ SFormat2 Desired document format 

Reply 

Length Field Comment 

4 NMessageLength Length of the message 

4 eCommand CLSTART_GET_JOB_REPLY 

2 NVersion Version number (set to 2) 

4 NCorrelation Correlation from Request 

2 EStatus SUCCESS (0) FAILURE (1) 

4 NFileHandle Handle to File 



Comments 



GetJobData 




Request 






Length 


Field 


Comment 


4 


NmessageLength 


Length of the message 


4 


Ecommand 


CI_GET__JOB_DATA_REQUEST 


2 


NVersion 


Version number (set to 2) 


4 


NCorrelation 


Correlation to be returned by reply 


4 


NFileHandle 


Handle to file 


4 


NSizeOf 


Size of data requested 


Reolv 






Length 


Field 


Comment 


4 


NMessageLength 


Length of the message 


4 


ECommand 


CI_GET_JOB_DATA_REPLY 


2 


NVersion 


Version number (set to 2) 


4 


NCorrelation 


Correlation from Request 


2 


EStatus 


SUCCESS (0) FAILURE (1) 
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NSizeOf 
AchData 
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Size of data to be transmitted 
Data 



Comments 

CancelGetJob 
Request 



L.diy III 


FiPlrl 


nominpnt 


A 


NM^^^nn^l pnnth 


L enath of tPie messaae 


4 


ECommand 


CI_CANCEL_GET_JOB_REQUEST 


2 


NVersion 


Version number (set to 2^ 


4 


NCorreiation 


Correlation to be returned by reply 


4 


NFileHandle 


Handle to file 


Reply 






Length 


Field 


Comment 


4 


NMessageLength 


Length of tine message 


4 


ECommand 


CI_CANCEL_GET_JOB_REPLY 


2 


NVersion 


Version number (set to 2) 


4 


NCorreiation 


Correlation from Request 


2 


EStatus 


SUCCESS (0) 
FAILURE (1) 


De/e^eJo^) 




Request 






Length 


Field 


Comment 


4 


NIVIessageLengtli 


Length of the message 


4 


ECommand 


CLDELETE_JOB__REQUEST 


2 


NVersion 


Version number (set to 2) 


4 


NCorreiation 


Correlation to be returned by reply 


4 


NUniqueldJob 


The unique id of the job 


Reply 






Length 


Field 


Comment 


4 


NMessageLengtIn 


Length of the message 


4 


ECommand 


CLDELETE_JOB_REPLY 
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2 . nVersion Version number (set to 2) 

4 nCorrelation Correlation fronn Request 

2 eStatus SC_SUCCESS 

SC_FAILURE 

SC_PENDING_DELETE 

Comnnents 

SC_PENDING_DELETE means that the job was in use by someone else, and will be 
deleted automatically by the Job Database as soon as it is released. 

5 GetPrintEngine 



Request 






Length 


Field 


Comment 


4 


NMessageLength 


Length of the message 


4 


ECommand 


CLGET_PRINT_ENGINE_REQUEST 


2 


NVersion 


Version number (set to 2) 


4 


NCorrelation 


Correlation to be returned by reply 


+ 


SFormat2 


Source format 


+ 


SFormat2 


Target format 


Reply 






Length 


Field 


Comment 


4 


NMessageLength 


Length of the message 


4 


ECommand 


CLGET_PRINT_ENGINE_REPLY 


2 


NVersion 


Version number (set to 2) 


4 


NCorrelation 


Correlation from Request 


2 


EStatus 


SC_SUCCESS 






SC^FAILURE 


2 


NPort 


The port number of the Print Engine 


4 


NNumberOflpAddr 


Number of ip addresses in the list 


+ 


{achlpAddr}* 


IP Addresses of the Print Engine 



Comments 

10 SetDevicelnfo 
Request 

Length Field Comment 
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4 


NMessageLength 


Length of the message 


4 


ECommand 


CI_SET_DEVICEJNFO_REQUEST 


2 


NVersion 


Version number (set to 2) 


4 


NCorrelation 


Correlation to be returned by reply 


4 


N N u m be rOf Devices 


Entries in list below 


+ 


{sDevicelnfoStruct2}+ 


Information about the device 


Reply 






Length 


Field 


Comment 


4 


NMessageLength 


Length of the message 


4 


ECommand 


CI_SET_DEVICEJNFO_REPLY 


2 


NVersion 


Version number (set to 2) 


4 


NCorrelation 


Correlation from Request 


2 


EStatus 


SC_SUCCESS, SC_FAILURE 


2 


ESenseCode 


Ok(0) 


Comments: 




GetDevicelnfo 




Request 






Length 


Field 


Comment 


4 


NMessageLength 


Length of the message 


4 


eCommand 


CI_G ET_D E V 1 C EJ N F 0__R E Q U E ST 


2 


nVersion 


Version number (set to 2) 


4 


nCorrelation 


Correlation to be returned by reply 


RgdIv 






Length 


Field 


Comment 


4 


nMessageLength 


Length of the message 


4 


eCommand 


CI_GET_DEVICEJNFO_REPLY 


2 


nVersion 


Version number (set to 2) 


4 


nCorrelation 


Correlation from Request 


2 


eStatus 


SC_SUCCESS, SC_FAILURE 


2 


eSenseCode 


Ok(0) 


4 


nNumberOfDevices 


Entries in list below 


+ 


{sDevicelnfoStruct2}+ 


Information about the device 
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Comments 



Noti fy Device I rq 
5 Request 



Length Field Comment 

4 NmessageLength Length of the message 

4 ECommand CLNOTIFY_DEVICEJRQ_REQUEST 

2 NVersion Version number 

4 NCorrelation Correlation to be returned by reply 

4 NNumberOfDevices Entries In list below 

+ {sDevicelnfoStruct2}+ Information about the device 

Reply 

Length Field Comment 

4 NMessageLength Length of the message 

4 ECommand CL NOTIFY_ DEVICEJRQ _REPLY 

2 NVersion Version number 

4 NCorrelation Correlation from Request 

2 EStatus SC_SUCCESS, SC_FAILURE 

2 ESenseCode Ok(0) 



Comments 



ChangePinCode 
10 Request 

Length Field 



4 
4 
2 
4 

5 



NMessageLength 

eCommand 

nVersion 

nCorrelation 

szNewPINCode 



Reply 

Length Field 



nMessageLength 



Comment 

Length of the message 

CLCHANGE_PIN_CODE_REQUEST 

Version number (set to 2) 

Correlation to be returned by reply 

Old pin has been entered again and new 

PIN, has been entered twice and checked 

Comment 

Length of the message 
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4 


eCommand 


C l__C HAN G E_P 1 N_CO D E_KE P L Y 


2 


nVersion 


Version number (set to 2) 


4 


nCorrelation 


Correlation from Request 


2 


eStatus 


or^ Qi IPPPCQ QP rAII 1 IRF 
OU OULfLfCOO, 0\j rr\ILUr\C 


Comments 




Open Card 




Request 






Length 


Field 


Comment 


4 


NMessageLength 


Length of the message 


4 


ECommand 


CI_OPEN_CARD_REQUEST 


2 


NVersion 


Version number (set to 2) 


4 


NCorrelation 


Correlation to be returned by reply 


40 


SzCardNumber 


Card number to be opened 


9 


SzPUKCode 


Code authenticating the user 


5 


SzPINCode 


The users PINCode 


Reply 






Length 


Field 


Comment 


4 


NMessageLength 


Length of the message 


4 


Ecommand 


Cl_ OPEN_CARD __REPLY 


2 


Nversion 


Version number (set to 2) 


4 


Ncorrelation 


Correlation from Request 


2 


Estatus 


SC_SUCCESS 






SC_FAILURE 


+ 


SzMessage 


Message to the user 



Comments 

GetPrinters 
Request 

Length Field Comment 



4 NmessageLength Length of the message 

4 ECommand CI_GET_PRINTERS_REQUEST 

2 NVersion Version number (set to 2) 

4 NCorrelation Correlation to be returned by reply 
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Reply 



Length 


Field 


Comment 


4 


NMessageLength 


Length of the message 


4 


ECommand 


Lrl_ ob l_rKIN 1 tKo__Kt:rLY 


2 


NVersion 


Version number (set to 2) 


4 


nCorrelation 


Correlation from Request 


2 


EStatus 


SC_SUCCESS / SC_FAILURE 


4 


NSizeOfNames 


Length of the printer names list 


4 


NNumberOfNames 


Number of names in the list 


+ 


{szPrinterNames}* 


A list of zero terminated printer names 



Comments 

All documents are tagged with the name of the device driver that generated it. This 
request is used to retrieve all device-driver-names in the database, so that the FE can 
display this list during configuration. 

Siart/KQQOuntmg 
Request 

Length Field 

4 NMessageLength 

4 ECommand 

2 NVersion 

4 NCorrelation 

4 NJobId 

2 NNumberOfCopies 

+ SDevicelnfoStruct2 

Reply 

Length Field 

4 NMessageLength 

4 ECommand 

2 NVersion 

4 NCorrelation 

2 EStatus 

2 ESenseCode 



Comment 

Length of the message 
CI_START_ACCOUNTING_REQUEST 
Version number (set to 2) 
Correlation to be returned by reply 
Job Id of job to be accounted 
Number of copies requested by user 
Information about the device 

Comment 

Length of the message 
Cl_ START_ACCOUNTING_REPLY 
Version number (set to 2) 
Correlation from Request 
SC_SUCCESS / SC_FAILURE 
Ok(0), AccountingNotSupported(l), 
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AccountingNotEnabledForUser(2) 
4 NSessionID Unique id identifying the accounting 

session 

8 NCreditsLeft (double) Credits for the user 

Comments 

AccountingNotSupported has higher precedence than Accounting NotEnabledForUser 
5 StopAccounting 



Request 






Length 


Field 


Comment 


4 


nMessageLength 


Length of the message 


4 


eCommand 


CI_STOP^ACCOUNTING„REQUEST 


2 


nVersion 


Version number (set to 2) 


4 


nCorrelation 


Correlation to be returned by reply 


4 


nSessionID 


Unique id identifying a session 


Reply 






Length 


Field 


Comment 


4 


nMessageLength 


Length of the message 


4 


eCommand 


Cl_ STOP_ACCOUNTING_REPLY 


2 


nVersion 


Version number (set to 2) 


4 


nCorrelation 


Correlation from Request 


2 


eStatus 


SC_SUCCESS / SC_FAILURE 


2 


eSenseCode 


Ok(0), UnknownSessionld(l) 


8 


nCreditsLeft (double) 


Credits for the user 



Comments 

1 0 NotifyPagesPrinted 
Request 

Length Field Comment 



4 nMessageLength Length of the message 

4 eCommand CLNOTIFY_PAGES_PRINTED_REQUES 

T 

2 nVersion Version number (set to 2) 
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4 


nCorrelation 


Correlation to be returned by reply 


4 


nSessionID 


Unique id identifying a session 


4 


nAbsPageCount 


Number of pages printed in total 


2 


nPageCountModel 


SW(0), HW(1) 


4 


nPageCountStatus 


0(Ok), 1 (Undefined), 2(Failure) 


4 


nPageCountSenseCo 


O(0k), 2(Failure), 3(PaperJam), 




de 


4(PaperOut), (5)ProbeError 


+ 


szPageCountlnfo 


Descriptive text (zero terminated) 


Reply 






Length 


Field 


Comment 


4 


nMessageLength 


Length of the message 


4 


eCommand 


Cl_ NOT!FY_PAGES_PRINTED _ 


2 


nVersion 


Version number (set to 2) 


4 


nCorrelation 


Correlation from Request 


2 


eStatus 


SC^SUCCESS / SC__FAILURE 


2 


eSenseCode 


Ok(0), UnknownSessionld(l), 






CreditShortage(2) 


8 


nC red its Left 


Credits for the user 



Comments 



UpdateFromRegistry 
Request 



Length Field Comment 

4 nMessageLength Length of the message 

4 eCommand CLUPDATE_FROM_REGISTY_REQUES 

T 

2 nVersion Version number (set to 2) 

4 nCorrelation Correlation to be returned by reply 

Reply 

Length Field Comment 

4 nMessageLength Length of the message 

4 eCommand CLUPDATE_FROM_REGISTY_REPLY 

2 nVersion Version number (set to 2) 

4 nCorrelation Correlation from Request 
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2 eStatus SC_SUCCESS, SC__FAILURE 

Comments 

Safecom Server - specialized commands, detailed 

5 GetPrintJoblnfoList 
Request 
Length Field 
4 NMessageLength 
4 eCommand 
2 nVersion 
4 nCorrelation 
Reply 

Length Field 

4 nMessageLength 
4 eCommand 
2 nVersion 
4 nCorrelation 
2 eStatus 
4 nNumberOfJobs 
+ {sPrintJoblnfoStruct2} 
+ 

Comments 

10 GetPrintEngine (Comment) 
Comments 

The task of this command is to supply the Control Unit with an address of a print engine 
that is capable of delivering the job in the right format. Since we do not yet have 
hardware independent format the target and document format are the same and the 
15 request will be to find any available print engine. By specifying source and taget format, 
we basically ask for a PrintEngine capable of transforming from one format to the other. 



Comment 

Length of the message 
SS„GET_JOBJNFO_LIST_REQUEST 
Version number (set to 2) 
Correlation to be returned by reply 

Comment 

Length of the message 
SS_GET_JOBJNFO_LIST_REPLY 
Version number (set to 2) 
Correlation from Request 
SC_SUCCESS, SC_FAILURE 
Elements in list below 
Array of PrintJoblnfoStructs 
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Job Database - specialized commands, detailed 



ValidUserByCardNo 
Request 



10 



Length 

4 



2 
4 

40 

Reply 
Length 

4 

4 
2 
4 
2 



Field 

nMessageLen 

gth 

eCommand 

nVersion 

nCorrelation 

szCardNo 



Field 

nMessageLen 

gth 

eCommand 
nVersion 
nCorrelation 
eStatus 



nUserld 



Comments 



Comment 

Length of the message 

JDB_VALIDATE_USER„BY_CARD_NO_REQUE 
ST 

Version number (set to 2) 

Correlation to be returned by reply 

Card number read on the SafeCom unit - zero 

terminated 

Comment 

Length of the message 

JDB_VALIDATE_USER_BY_CARD_NO_REPLY 

Version number (set to 2) 

Correlation from Request 

USER_VALID 

USERJNVALID 

USERJS^BLOCKED 

FAILURE 

An unique id identifing the user 



This command checks if a user with a specific card number exits in the database. 
Clients can only perform this command with a security level of Power User or 
Administrator. 



ValidUserByUserLogon 

Request 

Length Field 

4 nMessageLength 



Comment 

Length of the message 



RF-2000-01-28-G:\097\696\M_EB.doc 



74 



4 eCommand 

2 nVersion 

4 nCorrelation 

21 szUserLogon 
Reply 

Length Field 

4 nMessageLength 

4 eCommand 

2 nVersion 

4 nCorrelation 

2 eStatus 



nUserld 



Comments 



JDB_VALIDATE_USER_BY_USER_LOGO 

N_REQUEST 

Version number (set to 2) 

Correlation to be returned by reply 

Asc-ii user logon - zero terminated 

Comment 

Length of the message 

JDB_VALIDATE_USER_BY_USER_LOGO 

N_REPLY 

Version number (set to 2) 

Correlation from Request 

USER_VALID 

USERJNVALID 

USERJS_BLOCKED 

FAILURE 

An unique id identifing the user 



This command checks if a user with a specific user id exits in the database. Clients can 
only perform this command with a security level of Power User or Administrator. 



StartAddJob 
Request 



Length Field Comment 

4 NMessageLength Length of the message 

4 eCommand JDB_START_ADD_JOB_REQUEST 

2 nVersion Version number (set to 2) 

4 nCorrelation Correlation to be returned by reply 

+ sJoblnfoStruct2 Information about job 

4 Add. Data Length Length of additional data 

+ Add. Data Additional data 
Reply 

Length Field Comment 

4 nMessageLength Length of the message 
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4 eCommand JDB_START_ADD_JOB_REPLY 

2 nVersion Version number (set to 2) 

4 nCorrelation Correlation from Request 

4 nFileHandle FileHandle for file 



Comments 

The job Is added in the context of the user who has logged on. 

StartAddJobByUserld 
Request 



Length Field Comment 

4 NmessageLen Length of the message 

gth 

4 ECommand JDB_START_ADD_JOB_BY_USERJD_REQU 

EST 

2 NVersion Version number (set to 2) 

4 NCorrelation Correlation to be returned by reply 

4 NUserld User indetification 

+ SJoblnfoStruct Information about job 

2 

4 Add. Data Length of additional data 

Length 

+ Add. Data Additional data 

Reply 

Length Field Comment 

4 NMessageLen Length of the message 

gth 

4 eCommand JDB_START_ADD_JOB_BY_USERJD_REPLY 

2 nVersion Version number (set to 2) 

4 nCorrelation Correlation from Request 

4 nFileHandle FileHandle for file 



Comments 

The job is added using a unique user Id. 
AddJobData 
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Request 






Length 


Field 


Comment 


4 


NMessageLength 


Length of the message 


4 


ECommand 


JDB_ADD_JOB_DATA_REQUEST 


2 


NVersion 


Version number (set to 2) 


4 


NCorrelation 


Correlation to be returned by reply 


4 


NFilehandie 


Handle to file 


4 


NSizeOf 


Size of data 


+ 


AchData 


Job data 


Reply 






Length 


Field 


Comment 


4 


NMessageLength 


Length of the message 


4 


ECommand 


JDB_ADD_JOB_DATA_REPLY 


2 


NVersion 


Version number (set to 2) 


4 


NCorrelation 


Correlation from Request 


2 


EStatus 


Success / Failure 



Comments 

The doc data is sent in chunks with Ctrl signal in between. The unique id returned by the 
5 command on success can be used in the job specific command in the interface. 

CommitJob 
Request 

Length Field 

4 NMessageLength 

4 ECommand 

2 NVersion 

4 NCorrelation 

4 NFilehandie 

4 NPages 

10 Reply 

Length Field 

4 NMessageLength 

4 ECommand 



Comment 

Length of the message 
JDB_COMMIT_JOB_REQUEST 
Version number (set to 2) 
Correlation to be returned by reply 
Handle to file 

Pages in print job ^ WHY (RWB) ? 
Comment 

Length of the message 
JDB_COMMIT_JOB_REPLY 
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2 NVersion 
4 NCorrelation 
2 EStatus 
Comments 
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Version number (set to 2) 
Correlation from Request 
Success / Failure 



CancelAddJob 
Request 



Length Field Comment 

4 nMessageLength Length of the message 

4 eCommand JDB_CANCEL__ADD_JOB_REQUEST 

2 nVersion Version number (set to 2) 

4 nCorrelation Correlation to be returned by reply 

4 nFilehandle Handle to file 

Reply 

Length Field Comment 

4 nMessageLength Length of the message 

4 eCommand JDB_CANCEL_ADD__JOB3EPLY 

2 nVersion Version number (set to 2) 

4 nCorrelation Correlation from Request 

2 eStatus Success / Failure 



Comments 



SetJoblnfo 




Request 






Length 


Field 


Comment 


4 


nMessageLength 


Length of the message 


4 


eCommand 


JDB_SET_JOBJNFO_REQUEST 


2 


nVersion 


Version number (set to 2) 


4 


nCorrelation 


Correlation to be returned by reply 


4 


nJobId 


The jobs unique id 


+ 


sJoblnfoStruct2 


Struct with the new attributes 


Reply 






Length 


Field 


Comment 


4 


nMessageLength 


Length of the message 
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4 eCommand 

2 nVersion 

4 nCorrelation 

2 eStatus 

+ szMessage 



Comments 

GetJoblnfoList 
Request 



Length Field 

4 NMessageLength 

4 ECommand 

2 NVersion 

4 Ncorrelation 
Reply 

Length Field 

4 NmessageLength 

4 Ecommand 

2 Nversion 

4 Ncorrelation 

2 Estatus 

4 NNumberOfJobs 

+ {sJoblnfoStruct2}+ 



Comments 

GetJoblnfoListByUserld 

Request 

Length Field 



4 NMessageLength 

4 ECommand 

2 NVersion 

4 NCorrelation 

4 NUserld 
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JDB_SET_JOB_INFO_REPLY 
Version number (set to 2) 
Correlation from Request 
SUCCESS, FAILURE 
Message for user if fail - zero terminated 



Comment 

Length of the message 
JDB_GET_JOBJNFO_LIST_REQUEST 
Version number (set to 2) 
Correlation to be returned by reply 

Comment 

Length of the message 
JDB„GET_JOBJNFO„LIST_REPLY 
Version number (set to 2) 
Correlation from Request 
SC_SUCCESS, SC_FAILURE 
Elements in list below 
Job information 



Comment 

Length of the message 

JDB_GET_JOBJNFO_LIST_BY_USERJD 

_REQUEST 

Version number (set to 2) 
Correlation to be returned by reply 
Users unique id 
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Reply 

Length Field Comment 



4 NMessageLength Length of the message 

4 ECommand JDB_GET_JOB_INFO_LIST_BY_USERJD 

_REPLY 

2 NVersion Version number (set to 2) 

4 NCorrelation Correlation from Request 

2 EStatus SC_SUCCESS, SC_FAILURE 

4 NNoJobs The number of jobs struct 

+ {sJoblnfoStruct2}+ Job Information 



Comments 



GetUserlnfo 




Request 






Length 


Field 


Comment 


4 


NmessageLength 


Length of the message 


4 


ECommand 


JDB_GET__USERJNFO_REQUEST 


2 


NVersion 


Version number (set to 2) 


4 


NCorrelation 


Correlation to be returned by reply 


Repiv 






Length 


Field 


Comment 


4 


NMessageLength 


Length of the message 


4 


ECommand 


JDB_GET_USERJNFO_REPLY 


2 


NVersion 


Version number (set to 2) 


4 


NCorrelation 


Correlation from Request 


2 


eStatus 


SC^SUCCESS, SC_FAILURE 


+ 


SUserlnfoStruct2 


Struct describing the user 



Comments 

This command gives a limited info about the user. 



GetUserlnfoUst 
Request 

Length Field Comment 

4 NMessageLength Length of the message 
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4 eCommand JDB_GET_USERJNFO„LIST_REQUEST 

2 nVersion Version number (set to 2) 

4 nCorrelation Correlation to be returned by reply 

Reply 

Length Field Comment 

4 nMessageLength Length of the message 

4 eCommand JDB_GET_USERJNFO_LIST_REPLY 

2 nVersion Version number (set to 2) 

4 nCorrelation Correlation from Request 

2 eStatus SC_SUCCESS, SC_FAILURE 

4 nNoUsers Number of users 

+ {sUserinfoStruGt2}+ Array of user info structs 



Comments 

This command is for Administrator only. 

GetUserlnfoByUserld 
Request 



Length Field Comment 

4 NmessageLengt Length of the message 

h 

4 ECommand JDB_GET_USERJNFO_BY_USERJD_REQUE 

ST 

2 NVersion Version number (set to 2) 

4 NCorrelation Correlation to be returned by reply 

4 NUserld Unique id of a user 

Reply 

Length Field Comment 

4 NMessageLengt Length of the message 

h 

4 ECommand JDB_GET_USERJNFO_BY_USERJD_REPLY 

2 NVersion Version number (set to 2) 

4 NCorrelation Correlation from Request 

2 EStatus SC^SUCCESS, SC_FAILURE 

+ SUserlnfoStruct Struct describing the user 
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2 

Comments 

This command is for Administrator only. 

DeleteUser 
5 Request 



Length 


Field 


Comment 


4 


NMessageLength 


Length of the message 


4 


ECommand 


JDB_DELETE_USER_REQUEST 


2 


NVersion 


Version number (set to 2) 


4 


NCorrelation 


Correlation to be returned by reply 


4 


NUserld 


Unique id of the user 


Reply 






Length 


Field 


Comment 


4 


nMessageLength 


Length of the message 


4 


eCommand 


JDB_DELETE_USER__REPLY 


2 


nVersion 


Version number (set to 2) 


4 


nCorrelation 


Correlation from Request 


2 


eStatus 


SC_SUCCESS, SC_FAILURE 



Comments 

This command is for Administrator only. 



AddUser 






Request 






Length 


Field 


Comment 


4 


nMessageLength 


Length of the message 


4 


eCommand 


JDB_ADD_USER_REQUEST 


2 


nVersion 


Version number (set to 2) 


4 


nCorrelation 


Correlation to be returned by reply 


+ 


sUserlnfoStruct2 


Struct describing user info 


Reolv 






Length 


Field 


Comment 


4 


nMessageLength 


Length of the message 
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4 eCommand 

2 nVersion 

4 nCorrelation 
2 eStatus 
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JDB_ADD_USER_REPLY 
Version number (set to 2) 
Correlation from Request 
SUCCESS 
FAILURE 

USER_NAME_EXITS 
USER CARDNO EXITS 



Comments 

This command is for Administrator only. 



5 ModifyUser 
Request 
Length Field 



4 nMessageLength 

4 eCommand 

2 nVersion 

4 nCorrelation 

+ sUserlnfoStruct2 



Comment 

Length of the message 
JDB_MODIFY_USER_REQUEST 
Version number (set to 2) 
Correlation to be returned by reply 
Struct describing user info 



Reply 
Length 
4 



Field 

NMessageLength 
4 ECommand 
2 NVersion 
4 NCorrelation 
2 eStatus 
Comments 

10 This command is for Administrator only. 



Comment 

Length of the message 
JDB_MODIFY_USER„REPLY 
Version number (set to 2) 
Correlation from Request 
SC SUCCES, SC FAILURE 



AddPrinter 
Request 

Length Field Comment 

4 NMessageLength Length of the message 
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4 ECommand JDB„ADD_PR1NTER_REQUEST 

2 NVersion Version number (set to 2) 

4 NCorrelation Correlation to be returned by reply 

+ SzPrinterName Zero terminated string describing the 

printername 

Reply 

Length Field Comment 

4 NMessageLength Length of the message 

4 ECommand JDB_ADD_ PRINTER _REPLY 

2 NVersion Version number (set to 2) 

4 nCorrelation Correlation from Request 

2 sStatus SC_SUCCES, SC^FAILURE 



Comments 

This command is an open command. 

5 

RemovePrinter 
Request 
Length Field 
4 nMessagelength 
4 eCommand 
2 nVersion 
4 nCorrelation 
+ SzPrinterName 

Reply 

Length Field 

4 nMessageLength 
4 eCommand 
2 nVersion 
4 nCorrelation 
2 eStatus 
Comments 
10 This command is an open command. 



Comment 

Length of the message 
JDB_REMOVE,PRINTER_REQUEST 
Version number (set to 2) 
Correlation to be returned by reply 
Zero terminated string describing the 
printername 

Comment 

Length of the message 
JDB_REMOVE _ PRINTER _REPLY 
Version number (set to 2) 
Correlation from Request 
SC„SUCCES, SC^FAILURE 
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AddFaktura 




Request 






Length 


Field 


Comment 


4 


nMessageLength 


Length of the message 


4 


eCommand 


JDB__ADD_FAKTURA_REQUEST 


2 


nVersion 


Version number (set to 2) 


4 


nCorrelation 


Correlation to be returned by reply 


+ 


FakturalnfoStmct2 


Faktura info struct to add 


Reply 






Length 


Field 


Comment 


4 


nMessageLength 


Length of the message 


4 


eCommand 


JDB_ ADD_FAKTURA_REPLY 


2 


nVersion 


Version number (set to 2) 


4 


nCorrelation 


Correlation from Request 


2 


sStatus 


SC_SUCCES, SC_FAILURE 



5 

Comments 

ModifyFaktura 
Request 



Length Field Comment 

4 NMessageLength Length of the message 

4 ECommand JDB_MODIFY_FAKTURA_,REQUEST 

2 NVersion Version number (set to 2) 

4 NCorrelation Correlation to be returned by reply 

+ FakturalnfoStruct2 Faktura info struct to modify 
10 Reply 

Length Field Comment 

4 NMessageLength Length of the message 

4 ECommand JDB_MODIFY_FAKTURA__REPLY 

2 NVersion Version number (set to 2) 

4 NCorrelation Correlation from Request 

2 sStatus SC^SUCCES, SC^FAILURE 
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Comments 

RemoveFaktura 
5 Request 



Length Field Comment 

4 NMessageLength Length of the message 

4 ECommand JDB_REMOVE_FAKTURA_REQUEST 

2 NVersion Version number (set to 2) 

4 nCorrelation Correlation to be returned by reply 

4 Fakturald Faktura id to remove 

Reply 

Length Field Comment 

4 nMessageLength Length of the message 

4 eCommand JDB_REMOVE_FAKTURA_REPLY 

2 nVersion Version number (set to 2) 

4 nCorrelation Correlation from Request 

2 sStatus SC^SUCCES, SC^FAILURE 



Comments 

10 GetFakturaList 
Request 



Length Field Comment 

4 NMessageLength Length of the message 

4 ECommand JDB„GET_FAKTURA_LIST_REQUEST 

2 NVersion Version number (set to 2) 

4 nCorrelation Correlation to be returned by reply 

Reply 

Length Field Comment 

4 nMessageLength Length of the message 

4 eCommand JDB_GET_FAKTURA„L1ST__REPLY 

2 nVersion Version number (set to 2) 

4 nCorrelation Correlation from Request 
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2 sStatus SC_SUCCES, SC_FAILURE 

4 nFakturaNo Number faktura info structs in list 

+ {FakturalnfoStruct2}+ List of faktura info structs 



Comments 

GetFakturaByld 
Request 



Length Field Comment 

4 nMessageLength Length of the message 

4 eCommand JDB„GET_FAKTURA_BYJD_REQUEST 

2 nVersion Version number (set to 2) 

4 nCorrelation Correlation to be returned by reply 

4 Fakturald Faktura id 
5 Reply 

Length Field Comment 

4 nMessageLength Length of the message 

4 eCommand JDB_GET_FAKTURA_BYJD_REPLY 

2 nVersion Version number (set to 2) 

4 nCorrelation Correlation from Request 

2 sStatus SC_SUCCES, SC^FAILURE 

+ FakturainfoStruct2 Faktura info struct 



Comments 

AllowUserToNid 
10 Request 

Length Field Comment 



4 nMessageLength Length of the message 

4 eCommand JDB_ALLOW_USER_TO_NlD_REQUEST 

2 nVersion Version number (set to 2) 

4 nCorrelation Correlation to be returned by reply 

4 UserNlD User unique node id to allow to NID 

4 NID Node id 
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Length Field 



4 nMessageLength 

4 eCommand 

2 nVersion 

4 nCorrelation 
2 sStatus 



Comments 

DenyUserFromNid 
5 Request 



Length Field 

4 nMessageLength 

4 eCommand 

2 nVersion 

4 nCorrelation 

4 UserNlD 

4 NID 
Reply 

Length Field 

4 nMessageLength 

4 eCommand 

2 nVersion 

4 nCorrelation 
2 sStatus 



Comments 

GetUsersAllowedToNid 
10 Request 

Length Field 

4 NMessageLength 

4 ECommand 



87 

Comment 

Length of the message 
JDB_ALLOW_USER_TO_NID_REPLY 
Version number (set to 2) 
Correlation from Request 
SC_SUCCES, SC_FAILURE 



Comment 

Length of the message 

JDB_DENY_USER_FROM_NID„REQUES 

T 

Version number (set to 2) 
Correlation to be returned by reply 
User unique node id to remove from NID 
Node id 

Comment 

Length of the message 
JDB__DENY_USER_FROM_NlD_REPLY 
Version number (set to 2) 
Correlation from Request 
SC_SUCCES, SC_FAiLURE 



Comment 

Length of the message 

JDB_GET„USER_ALLOWS„NID_REQUE 

ST 
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2 nVersion 

4 nCorrelation 

4 NID 
Reply 

Length Field 

4 nMessageLength 

4 eCommand 

2 nVersion 

4 nCorrelation 
2 sStatus 
4 nNidNo 
+ {N1D}+ 



Comments 

GetGraphByNid 
Request 



Length Field 

4 NMessageLength 

4 ECommand 

2 NVersion 

4 NCorrelation 

4 NID 
Reply 

Length Field 

4 NMessageLength 

4 eCommand 

2 nVersion 

4 nCorrelation 
2 sStatus 
+ Graph 
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Version number (set to 2) 
Correlation to be returned by reply 
Node id 

Comment 

Length of the message 
JDB_GET_USERS_ALLOW_NID _REPLY 
Version number (set to 2) 
Correlation from Request 
SC_SUCCES, SC_FAILURE 
Number of nids in list 
List of nids 



Comment 

Length of the message 
JDB_GET_GRAPH_BY_NID_REQUEST 
Version number (set to 2) 
Correlation to be returned by reply 
Node id 

Comment 

Length of the message 
JDB_GET_.GRAPH__BY_NID _REPLY 
Version number (set to 2) 
Correlation from Request 
SC^SUCCES, SC^FAILURE 
Recursive list of Safecom structs 
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Comments 

UnkNidToNid 
Request 



Length Field Comment 

4 nMessageLength Length of the message 

4 eCommand JDB„LlNK„NID_TO_NiD„REQUEST 

2 nVersion Version number (set to 2) 

4 nCorrelation Correlation to be returned by reply 

4 NID Node id 

4 NID Node id 
5 Reply 

Length Field Comment 

4 nMessageLength Length of the message 

4 eCommand JDB_LINK_NID_TO_NID„REPLY 

2 nVersion Version number (set to 2) 

4 nCorrelation Correlation from Request 

2 sStatus SC^SUCCES, SC_FAILURE 



Comments 

UnLinkNidToNid 
Request 



Length Field Comment 

4 nMessageLength Length of the message 

4 eCommand JDB„UNLlNK_NID„TO_NID_REQUEST 

2 nVersion Version number (set to 2) 

4 nCorrelation Correlation to be returned by reply 

4 NID Node id 

4 NID Node id 
10 Reply 

Length Field Comment 

4 nMessageLength Length of the message 

4 eCommand JDB_UNLINK_NID_TO_NID_REPLY 

2 nVersion Version number (set to 2) 
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4 nCorrelation Correlation from Request 

2 sStatus SC_SUCCES, SC„FAILURE 

Comments 

Print Engine - specialized commands, detailed 

GetTransformList 
Request 
Length Field 
4 nMessageLength 
4 eCommand 
2 nVersion 
4 nCorrelation 
Reply 

Length Field 

4 nMessageLength 
4 eCommand 
2 nVersion 
4 nCorrelation 
2 eStatus 
4 nNumber of 

transforms 
+ {sFormat2 x 

sFormat2}+ 
Comments 

Accounting Server - specialized commands, detailed 

ExportAccountingTable 
Request 

Length Field Comment 

4 NMessageLength Length of the message 

4 Command EXPORT„ACCOUNTING_DATA_REQUES 

T 



Comment 

Length of the message 
PE_GET_TRANSFORM_LIST_REQUEST 
Version number (set to 2) 
Correlation to be returned by reply 

Comment 

Length of the message 
PE_GET_TRANSFORM_LIST_REPLY 
Version number (set to 2) 
Correlation from Request 
SC_SUCCESS, SC„FAILURE 

{SourceFormatxTargetFormat}+ 
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2 NVersion Version number (set to 2) 

4 NCorrelation Correlation to be returned by reply 

1 CSeparator Separator cliaracter in exported dataset 
1 6 AchStartDate^ Export accounting info from this date 

(SYSTEMTIME structure) 
16 AchStopDate Export accounting info up to this date 

(SYSTEMTIME structure) 
+ SzTargetURL File name incl. drive and path 

Reply 

Length Field Comment 

4 BMessageLength Length of the message 

4 eCommand EXPORT_ACCOUNTING_DATA_REPLY 

2 nVersion Version number (set to 2) 
4 bCorrelation Correlation from Request 

2 eStatus SC_SUCCESS, SC_FA1LURE 

2 eSenseCode Ok(0), AccountingNotSupported(l) 

4 nExportCount Number of exported entries 



Comments 

DeleteOldEntries 
Request 



Length Field Comment 

4 nMessageLength Length of the message 

4 eCommand DELETE_OLD_ENTRIES_REQUEST 

2 nVersion Version number (set to 2) 

4 nCorrelation Correlation to be returned by reply 

16 achDeleteBeforeDate (SYSTEMTIME structure) 

Reply 

Length Field Comment 

4 NMessageLength Length of the message 



^ If the start or stop date is filled with zeroes it means "all data" in the respective 
direction. 
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4 


eCommand 


DELETE_OLD_ENTRIES __REPLY 


2 


nVersion 


Version number (set to 2) 


4 


nCorrelation 


Correlation fronn Request 


2 


eStatus 


SC_SUCCESS, SC_FAILURE 


2 


eSenseCode 


Ok(0), AccountingNotSupported 


4 


nN umber Deleted 


Number removed from database 



Comments 

Broadcast Server - Specialized commands, detailed 



Identify [U DP] 
Request 



Length 

4 
4 
2 
4 
4 



20 



Field 

nMessageLengtfi 

eCommand 

nVersion 

nCorrelation 

achMask 



szGroup 



Comment 

Length of the message 

BS J DENTI FY_REQU EST 

Version number (set to 2) 

Correlation to be returned by reply 

Bitfield defining search criteria 

0x01: Print Engine 

0x02: SafeCom Server 

0x04: Port Monitor 

0x08: Job Database 

0x10: Accounting Server 

String telling which groups thaf s going to 

be identified. If empty (ie "") its identify all 

group. 



Reply 

Length Field 
4 



4 
2 
4 
2 
6 



nMessagelength 
eCommand 
nVersion 
nCorrelation 
eStatus 
achMAC 



Comment 

Length of the message 
BSJDENTIFY_REPLY 
Version number (set to 2) 
Correlation from Request 
SC^SUCCESS, SC_FAILURE 
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20 szGroupName 
15 szSNumber 



ie "S42 069.020*02" 



m_nNuinberOflpAcldr Number of entries in IP-ADDR list (addrs) 
s 

m_nNumberOfldentif Number of Servers in the server list 
y-Structs 



+ 
+ 



m_achlpAddrs 
{sldentifyStruct2}H 



SetBroadCastList [UDPJ 

Request 
Length Field 



4 
4 
2 
4 
2 

4 
+ 



nMessageLength 

eCommand 

nVersion 

nCorrelation 

achAppendToList 

nNumberOfMasks 
{BroadCastAddress}* 

szGroup 



Sequence of 4byte ip-addrs (dotted quad) 
List of server-types & port-numbers 



Comment 

Length of the message 
BS_BROADCAST_LIST_REQUEST 
Version number (set to 2) 
Correlation to be returned by reply 

0- Delete the old list and use this list 

1- If this show be appended to the old list 
Number of elements in list 
BroadCastAddress is an 4 bytes integer 
denoting the IP broadcast address 
Zero terminated string containing group 
name for the broadcast servers that are to 
be updated. Iff group is an empty string, all 
Broadcast servers are updated. 



Reply ( Currently this reply is not sent, since we have no use for it. It is defined herp fnr 

expansion reasons onlv^ 

Length Field Comment 

4 NMessageLength Length of the message 

4 ECommand BS_ BROADCAST_LIST _REPLY 

2 NVersion Version number (set to 2) 
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4 NCorrelation Correlation from Request 

2 EStatus SC_SUCCESS, SC_FAILURE 

Comments 

NOT SENT BY THE BROADCAST SERVER WHEN A SetBroadcastList-REQUEST IS 
RECEIVED! 

5 SetConfigurafion 



KeQUGSt 






Length 


Field 


Comment 




nMessageLength 


Length of the message 


A 

4 


eCommand 


CI_SET_CONFIGURATION_REQUEST 




nVersion 


Version number (set to 2) 


4 


NCorrelation 


Correlation to be returned by reply 


+ 


SzCfgData 


Zero terminated ASCW data 


Reply 






Length 


Field 


Comment 


4 


NMessageLength 


Length of the message 


4 


ECommand 


CLSET_CONFIGURATION_REPLY 


2 


NVersion 


Version number (set to 2) 


4 


NCorrelation 


Correlation from Request 


2 


EStatus 


SC_SUCGESS, SC_FAILURE 


+ 


SzSyntaxCheck 


Zero terminated ASCW data containing 



result of syntax check performed on 
received configuration data. 

Comments 

This command is available after the user has successfully logged in, also, the request 
10 will fail if the CanGetConfiguration-attribute in the database is set to "No". In its default 
setting the database only permits the Administrator (UID 0), to perform this action. The 
request will always be sent in encrypted form 

GetConfiguration 
15 Request 

Length Field 
4 NMessageLength 

RF-2000-01-28-G;\097\696\M_EB.doc 



Comment 

Length of the message 
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4 ECommand CI_GET_CONFIGURATION_REQUEST 

2 NVersion Version number (set to 2) 

4 NCorrelation Correlation to be returned by reply 

Reply 

Length Field Comment 

4 NMessageLength Length of the message 

4 ECommand CI_GET_CONFIGURATION_REPLY 

2 NVersion Version number (set to 2) 

4 NCorrelation Correlation from Request 

2 EStatus SC_SUCCESS, SC_FAILURE 



+ SzCfgData Zero terminated ASCII data, holding the 

current configuration the Win32 Servers 

Comments 

This command is available after the user has successfully logged in, also, the request 
5 will fail if the CanGetConfiguration-attribute in the database is set to "No". In its default 
setting the database only permits the Administrator (DID 0), to perform this action. The 
request will always be sent in encrypted form. 

BILLING 

10 

Introduction 

This document describes the billing concept in different aspects, including using 
SafeCom in a public area (ex in a library). 

15 

The basic principle of billing is to tag a print job with additional data at submission time. 
These data could, for a lawyer point of view, be which client to bill the print job to. In 
other companies it could be which project the print job should be billed to. 

20 Client side 
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The client will, every time he prints, see a dialog shown in figure 7 asking him what 
account to bill the print job to. The accounts that will be presented to the client are 
collected from the server. 

Figure 7 gives an impression of the dialog that is presented to the client. As seen there 
are fields to identify the user. This will be optional and the way the user should identify 
himself is also configurable from the server. There are the following login possibilities: 

• Userid and password, 

• Card reader and pin 

• Network login. 

The reason why it should be possible to configure login is that you can have public 
accessible computers where the user doesn't need to login to use the computer. So the 
only possible way to get the user information is at print time. 

In areas like libraries billing info will not be needed, and the dialog can be configured not 
to show the billing info. 
Items not shown: 

A search possibility in the client dialog should be implemented which allow fast access 
for large billing info. It will also be possible to let the dialog remember the last selection. 
(Pass through print can also be selected here). 

Server 

The server holds the list or the tree of billing info that the client can access at print time. 
It would be necessary to have access-rights on the billing info, because in some firms 
they don't want all employees to know all possible accounts. The list or tree of billing 
info will be customizable, except for a fixed billing info called personal (not shown 
above). 

The assigning of access rights implicates a need for creating groups of users with 
different access rights, so in large organization it would be easy to assign access rights 
to the billing info. 
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On the server each user shall have an attribute describing the login procedure for 
submitting print jobs. 

User login attribute: Network, card, password. 
Printing and data extracting 

Printing and collecting accounting info will be done in same way as described in the RS. 
The only difference is the billing info, which will appear in the accounting database. 
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